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ABSTRACT 



A tagging system for persons or objects comprises tags to be 
carried by the person or object, each tag transmitting a signal 
carrying a unique identification code and preferably includ- 
ing a smart card for the purchase of goods and services. A 
first type of tag detector is arranged at entrances to areas and 
detects signals from tags passing through the entrances. The 
detection region of this type of tag detector is limited to the 
region of the entrances. A database holds information from 
the respective persons or objects and the unique identifica- 
tion code of the tags being carried by the persons or objects 
and it receives and stores information on the use of the areas 
by the person. An entrance processor processes the detected 
signals to generate an invalid tag signal if a received unique 
identification code is invalid. A second type of tag detectors 
is provided for detecting signals from tags in the areas. The 
detection range of the second type of tag detectors are 
substantially larger than the detection range of the first type 
of tag detectors since these are provided for safety reasons 
or to provide a search and rescue capability. Card readers can 
be provided at outlets for goods and services in the resort 
and transactions are recorded in the database to provide 
further resort management information on spending habits. 
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TAGGING SYSTEM AND METHOD 

RELATED APPLICATIONS 

[0001] This application is a continuation under 35 USC 
111(a) of PCT/GB00/00992 filed Mar. 16, 2000 (WO 
00155818), which claimed priority from British application 
Serial No. 99/06037.8, filed Mar. 16, 1999, which applica- 
tions are incorporated by reference. 

FIELD OF THE INVENTION 

[0002] The present invention generally relates to a system 
and method for tagging persons such as skiers, mountaineers 
or hikers or objects such as boats, cars and airplanes. In 
particular, one aspect of the present invention relates to an 
apparatus and method for tagging persons such as skiers, 
mountaineers or hikers so as to both control access to ski 
lifts, cable cars etc. giving access to skiing areas or moun- 
tains, and to provide a search and rescue capability. The 
present invention also relates to a resort management system 
in which a tag stores monetary value information and a 
processing system links information on persons, locations 
and monetary value adjustments. 

BACKGROUND OF THE INVENTION 

[0003] There are in existence methods of enabling search 
and recovery of personnel lost on mountains or victims of 
avalanche. Such systems include passive tags sewn into ski 
wear which may be read by suitable detectors. Such a system 
is available from RECCO AB. Such a system, however, has 
a limited range, and it is not known in advance which skiers 
may have the tagged ski wear. 

[0004] It is also known to provide for the automatic 
accessing of ski lifts and the like using identity cards with 
photos and bar codes, swipe cards and passive short range 
tags incorporated within a lift pass. 

[0005] There is however, no prior art system which pro- 
vides a ski lift access control system integrated with an 
active personal tag which is effective for search and rescue 
purposes. 

SUMMARY OF THE INVENTION 

[0006] One aspect of the present invention provides an 
integrated tagging system which provides both ski lift, cable 
car access and inter-resort transport control and a personal 
safety tagging capability which can operate without requir- 
ing a transmission licence from the authorities. This aspect 
of the present invention is designed to use a tag which 
transmits a signal. As is known tagghg_system-readersV 
(proximity meters) a re^re^ ir ^^to^ ick^u p and~inter pfet~\ 
tsignalsx In this arrangement a first type of detector is 
provided for access control to detect tags passing through 
e ntrances t bjs3aMs ln~d "tfieTike . This is known technology 
as is used in situations such as accessing the Dartford Tunnel 
in the UK. Such a type of detector has a limited detection 
range to limit the region in which tags are detected to only 
the entrance region of the ski lift and the like. This provides 
the ski lift access control capability. Thus a skier must carry 
a ski lift pass which incorporates the tag in order to gain 
access to the ski lift. 

[0007] This aspect of the present invention uses these 
detectors in an alternative configuration such that they have 



a much longer range. These may be standard readers as for 
access control but with range alteration and added antenna 
configuration considerable reading range is added to the 
basic reader. These then are provided for security a nd safet y 
on the skiing areas with the capability of ij6admg^e:same3 

Ctagmi for accessin^m^sRiiifi s. For example, they can be 
provided in fixed positions in the vicinity of restricted areas 
to detect persons entering high risk or restricted areas giving 
resort personnel early wjti-ning that skiers may be in danger 

<Cff£inrarir^eaztha1r c]Ould Skiers in 

such areas may be unaware of their position, through 
adverse weather conditions but specific information on 
regular offenders, in good conditions and in the knowledge 
they were illegally "off piste" would be available through the 
database and necessary action could be taken, such as a stop 
being put on their lift pass and smart card. Specific knowl- 
edge of a skiers whereabouts would reduce search time 
significantly should he/she be reported lost at anytime since 
their last recorded reading, beltironOfrem^ 
w jll"be-Qn-thc-^ atab:a^ 

.geograpMcalLy^One or more detectors can be used by search 
and rescue personnel in order to locate skiers, mountaineers 
or hikers who are lost or incapacitated. Such a type of 
detector is mobile and can either be hand held or mounted 
on a vehicle such as a helicopter or snow mobile. 

[0008] This aspect of the present invention provides the 
advantage of an integrated access control system and search 
and rescue system at low cost since the level of the signals 
is kept below the level at which a license is required from the 
■ authorities. The long range detectors are however sensitive 
enough to detect tags at a range of 200 to 400 meters, 
depending on the physical nature and terrain in the area of 
use. 

[0009] In an embodiment of the present invention, the 
adaptation of the detector for search and rescue use includes 
using a directional antenna to enable the location and 
identity of a person carrying the tag to be determined. 

[0010] In a preferred embodiment the tag is active and 
includes a power supply (a battery), a circuit including 
stored identification code for generating an electromagnetic 
signal and an antenna for transmitting the signal. Preferably 
the signal is transmitted as a low frequency radio signal at 
a level below that which a license is required from the 
authorities. 

[0011] In an alternative embodiment, the t^^^pags^eiandi. 
t respoflds4o^afractiyatior^ ^ 

embodiment, the first and second tag detectors transmit the 
activation signal and receive the resultant signal from each 
tag. In this embodiment, preferably the first tag detectors 
transmit the activation signal only within the region of a 
respective entrance and the second tag detectors transmit the 
activation signal over a substantially larger range. 

[0012] In one embodiment the second tag detectors are 
substantially more sensitive to signals from the tags than the 
first tag detectors. 

[0013] In an embodiment of the present invention, each 
ta^transmte 

{a ndsa'd^baSfcTflf ~in forrB5tioli on persons and~ffie~tags trials 
Wrjey-are-carrying-provides-an"ad^ 

not" on lyndentify persons^if ;t he yrarerun fortun ate-to-have-to ~^ 
^e"located:by:a"seaTch"'and : Tescuei team, but also at 'provides^ 
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ra-the:s ^hfte^d^e~like~can^e4o gg ed-fo^ to 
cidentify-ajjiU^^ 
cmen t~and" pl_anning:puqy)ses. 

[0014] A second aspect of the present invention provides 
a i ^Ttn^Una gemenilsy stem m wn"ic5~"ta gs are issuea~tCi 
persons-in -the-resor^ . Each tag transmits a unique signal to 
ideritifylhe person carrying it and includes a readable 
storage means for storing monetary value information. 
Information on the persons who have been issued with tags 
is collated in a central processor forming an information 
database. As the person moves around the resort, tags carried 
by persons are detected in the vicinity of tag detectors. Tag 
detections are input to the centralized processor to provide 
information on the location and movement of persons. When 
a person wishes to purchase goods or services, or top-up the 
monetary value of the tag, reading means are provided in the 
resort to adjust the monetary value information carried by 
the storage means accordingly. Information on the adjust- 
ment of the monetary value information is also input to the 
central processor. Information on the identity and locations 
of persons and their spending habits is thus formed in the 
central processor by linking the data obtained from the 
issuance and detection of tags and the reading of the storage 
means on the tags. 

[0015] Thus when tags are issued to persons using the 
resort, a great deal of information can be obtained from the 
person. The tag can be provided to enable the person to gain 
access to areas of the resort e.g. ski lifts in a ski resort. At 
the time of issuance of a tag, a person can load the tag with 
a certain amount of monetary credit to be used for purchases 
of goods and services throughout the resort. In this way, the 
tag can be used for gaining access to areas of the resort, and 
for providing a simple means of purchasing goods and 
services in the resort. 

[0016] In a preferred embodiment, the resort management 
system uses the tagging system of the first aspect of the 
present invention to integrate a search and rescue system 
with a resort management system. 

[0017] A convenient form of the tag comprises a tag body 
housing a transmitter and memory storing the unique tag 
identification, and a smart card which is removable from the 
tag body. The smart card contains the monetary value 
information in a conventional known manner. Identification 
codes g^ven to the tag and to the smart card can be linked in 
the central processor for the resort in order to link informa- 
tion on the location and identity of persons and purchases 
made. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0018] Embodiments of the present invention will now be 
described with reference to the accompanying drawings; in 
which: 

[0019] FIG. 1 is a schematic drawing of the implementa- 
tion of a tagging system in a ski resort, 

[0020] FIG. 2a is a schematic diagram of one side of a tag; 

[0021] FIG. 2b is a schematic diagram of the other side of 
the tag; - 

[0022] FIG. 3 is a schematic diagram of a tag detector to 
be provided in the skiing areas; 



[0023] FIG. 4 is a schematic diagram of a tag detector to 
be provided at the ski lift entrances; and 

[0024] FIG. 5 is a schematic diagram of a tag detector to 
be used by search and rescue personnel. 

DETAILED DESCRIPTION 

[0025] Referring to FIG. 1, the implementation of a 
tagging system in a ski resort is illustrated. When a skier 
wishes to use the ski lifts in order to gain access to the skiing 
areas, they will be required to purchase a ski pass. The ski 
pass incorporates the tag and thus when the ski pass is 
purchased, a tag unique identification number is recorded for 
the skier together with personal information such as their 
n^ne 7address7contact numb ers, place of residejcc^ whether;? 
foll'time'orlocal'such'aTtnTId^ 

mfonnation-can-be-enteredinto"a^atab^se"f6r ma nagement^ 
pu rposes^ 

[0026] As can be seen in FIG. 1, when a skier 1 wishes to 
access the skiing areas, they will necessarily have to carry a 
ski pass 2 carried ab out their person. T his can be obtained 
fiGjnjiriojtf^ 

Aperson entersjthe required information e.g. name, address 
etc and enters^heiPcredit card details to be issued with a tag 
aTi±smaprc'aTd:cDm5ineid . The entered information is trans- 
mitted to a t central control station 6 to form and store a 



[0027] As the persons pass through the entrance 3 of the 
ski lift 5 they pass by tag detectors 4 which are of a first type 
which have a limited range of detection; the range of 
detection being limited to the entrance region 3 of the ski lift 
5. Thus, skiers 1 using the ski lift can be detected and 
logged. The tag detectors 4 are linked via a communication 
line 14 to a central control station 6. Within the central 
control station 6 a computer 7 stores a database of informa- 
tion on the tags and skiers and will thus store ski lift usage 
information for each skier. 

[0028] The tag detector 4 can either include some local 
processing capability or can refer back to the computer 7 in 
the central control station 6 in order to perform access 
control. When the unique identification code of the tag is 
detected, it is compared~with~valid^ c ode"s~to~detefq tine 
.whetheraccess'should be allQwed.or dem^lo~tSe~skie r 1. 
Thus for example, if the tag has been reported as being 
stolen, the validity of the identification code would have 
been cancelled and thus a skier attempting to use the stolen 
tag (ski pass) will be denied access to the ski lift. Also, since 
the ski passes may only be^^Mor^a^p^arUcxilar^penoSlQf^ 
ctimeetg. for the one week stay by the guests at the resort, any 
attempt to use the ski pass outside this period of validity will 
result in access to the ski lift being denied. 

[0029] All of the information to control access to the ski 
lift can be stored within the computer 7 within the central 
control station 6. 

[0030] The tag detector 4 at the entrance 3 to the ski lift 5 
is able not just to detect the skiers 1 individually as they pass 
the entrance but can detect multiple skiers and perform 
access control rapidly, 

[0031] Although in this embodiment a signal line 14 is 20 
provided between the tag detector 4 and the computer 7, a 
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radio frequency link could be provided instead as illustrated 
in the embodiment of FIG. 9 to the control center 6. 

[0032] The tag can also be used for controlling the use of 
25 buses to and from the ski lift i.e. it acts as a ticket. In such 
an arrangement tag detectors such as the tag detectors 4 can 
be used with an antenna to communicate with the central 
control station 6. The tags can thus be used to detect skiers 
going to and from the ski lift. 

[0033] This feature of the embodiment of the present 
invention thus provides for not only access control to the ski 
lift and buses but also a monitoring function to allow for the 
behavior of skiers to be monitored. This can be used f or 
planning and management purposes. 

[0034] Within the resort, there are also provided restau- 
rants and the like to allow persons to buy goods or services. 
The smart card issued to each person can be used for this 
purpose. Each smart card is loaded with a certain amount of 
credit when issued and this can be topped-up when neces- 
sary by for example using the kiosk 17. Thus as shown in 
FIG. 1, at a restaurant 15 there is provided a smart card 
reader 16 for reading the smart card carried by the tag. The 
appropriate cost of a meal can be deducted from the value 
carried by the smart card and this information on the 
transaction can be transmitted to the central control station 
6. Thus, in this way the computer 7 in the central control 
station 6 receives not only information on the person 
received during issuance of the tag and the location infor- 
mation obtained from the tag, but also information on the 
spending habits of the person. This information can be 
extremely useful to resort managers for planning and man- 
agement purposes. The provision of a smart card associated 
with a tag has the benefit of eliminating the need for separate 
cash or credit cards in the resort. Tie smart card and the tag 
are designed to provide everything a skier should need 
around the resort by providing access control and means of 
purchase. From the resort managers point of view, the 
combined smart card and tag provides the benefit of safety 
in that locations of skiers can be determined, and security 
since both the card and tag are linked at the point of issue by 
associating their unique identification numbers. This pro- 
tects again fraud in the event of loss. 
[0035] At the end of the required use of the card and tag, 
they can be returned to the machine where a refund on a 
deposit paid for the tag can be returned together with any 
remaining credit on the smart card. The tags and cards can 
then be recycled for farther use. 

[0036] In the skiing areas, a second type of tag detector 9 
can be provided at the boundary of or in a vicinity of regions 
which the ski resort managers do not wish skiers to access 
e.g. Of f piste areas, avalanche risk areas, or areas that are 
simply restricted. The tag detectors 9 have a much greater 
range than the first type of tag detectors 4 and can be 
omnidirectional or directional in their detection of tags 2 
provided on skiers 8 which enter the restricted areas. 
Because of the remoteness of the tag detectors 9, it is usually 
impractical to provide for land lines to the central control 
station 6. Thus the tag detectors 9 are provided with radio 
frequency transmitters. The transmitters can either have the 
power to transmit directly to an antenna 11 provided at the 
central control station 6, or can be low powered transmitters 
which are detected by a local antenna 10 which can amplify 
and relay the signals to the antenna 11 of the central control 
center 6. 



[0037] In this way the central control station 6 is able to 
monitor and identify skiers who enter restricted areas. This 
information can simply be used to warn the skier 8 when 
they descend that should they violate the restricted area 
again, sane ti pnsi^ Mtbeit^ 

mitheiresomn'afr^ 

ttESIsldSS The system provides the information which can 
allow the resort manager to decide how to act. This infor- 
mation can also be used for giving an indication of the 
possible location of a skier if they are reported missing. An 
indication that a skier has passed by certain tag detectors 9 
would give an indication of the possible locality of the skier 
8. Of course, the skier may simply have passed by the tag 
detectors 9 and may have descended from the mountains by 
some other route. 

[0038] If a slder 18 is reported missing, it is possible for 
search and rescue team to use the tag 2 to be worn by the 
skier 18 to locate the skier. For example, the search and 
rescue team can use a helicopter 12 provided with a tag 
detector 13 of a second type which has a long range 
capability in order to locate the skier 18. The tag detector 13 
provided in the helicopter 12 has a directional antenna to 
allow an operator to guide the helicopter 12 in the direction 
of any signal detected from the tag 2 worn by the skier 18. 
The tag detector 13 is even able to detect the skier 18 even 
when buried under snow due for example to an avalanche. 
The detector range of the tag detector 13 is anything from 
150 to 400 meters. It can be joystick operated over a sweep 
angle by an operator within the helicopter 12 in order to 
control both the attitude and azimuth of the antenna. 

[0039] Thus the feature of the provision of the long range 
tag detectors 9 and 13 in this embodiment provides for a 
safety and security feature within the tagging system and 
provides a rapid location method for avalanche victims. 
[0040] FIGS. 2a and 2b are schematic diagrams of a tag 
for use in the system. The tag comprises a ski pass in a tag 
part 2 and incorporates within the ski pass an antenna 20, 
and an electronic circuit 21 connected to the antenna 20 
which incorporates a component 22 storing the unique 
identification code for the tag. The circuit is powered by a 
small battery 23. Thus the tag is an active tag which, in order 
to save battery life periodically such as once every second, 
transmits a signal at 433.92 MHz and at an output power of 
10 mW carrying the unique identification code read from the 
component 22. The power of the transmitted signal is below 
the level at which a license is required. Such tags are 
commercially available from Advanced Technology Com- 
munications Limited for example. The tag can also incor- 
porate an anti-tamper device and a low battery warning 
device. On one side of the tag part 2 is a smart card holder 
24 into which a smart card 25 can be inserted. The tag 
assembly is also provided with a cord 26 to allow the tag 
assembly to be hung around a skier's neck. When the smart 
card 25 is to be used for payment of goods or services, or 
recharged with monetary credit, it can be removed from the 
holder 24 and placed in a card reader. 
[0041] In this embodiment of the present invention a 
single 25 (the same) tag is used to provide both access 
control and a search and rescue capability. It is the detectors 
for the two capabilities which are different. 
[0042] FIG. 3 is an illustration of the second type of tag 
detector 9 provided in the vicinity of restricted areas. The 
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detector 9 includes an antenna 30 for detecting the signals 
from the tags. The antenna is connected to a tag detector unit 
31 for analyzing the signal in order to extract the unique 
identification code. The unique identification code extracted 
is then passed to a radio frequency (RF) transmitter 34 which 
includes an antenna 35 in order to transmit a signal identi- 
fying the received unique identification codes either directly 
to the antenna 11 of the control center 6, or to the local 
antenna 10 for retransmission to the antenna 11 of the 
control center 6. The tag detector 9 is powered either by a 
solar power unit 32 or by a battery 33. The battery 33 is 
provided for backup when there is not enough output from 
the solar power unit 32 to power the tag detector 9. Thus this 
tag detector 9 does not require either mains power or a direct 
physical connection with the control center 6 enabling the 
positioning of these devices in remote areas. 

[0043] FIG. 4 is a schematic diagram of a tag detector 4 
provided at the entrance 3 to the ski lift 5. Such a detector 
is for example available from Advanced Technology Com- 
munications Limited. The tag detector 4 is provided with an 
antenna 41 connected to a tag detector unit 42 to analyze 
signals received from the tags in order to extract the unique 
identification code. This is then passed onto an interface unit 
44 which generates a signal for output to the central moni- 
toring station 6. The tag detector 4 is powered by external 
mains power and is also provided with a battery backup 43. 
Thus, because the tag unit 4 is provided usually in accessible 
areas, it is provided with mains power and a direct physical 
connection to the central monitoring station 6. However, 
where such facilities are difficult to provide, a unit similar to 
the tag detector 9 can be provided. 

[0044] FIG. 5 is a schematic diagram of a mobile tag 15 
detector 13 for use by the search and rescue personnel. The 
tag detector 13 is provided with a directional antenna 50. 
The antenna 50 can be steerable when the tag detector 13 is 
provided on a vehicle such as a helicopter. Alternatively, if 
the tag detector 13 is portable, the antenna 50 can be fixed 
to allow an operator simply to move the whole device in 
order to determine the directionality of the received signal 
i.e. the tag 2. The signals detected by the antenna 50 are 
analyzed by a tag detector unit 51 in order to extract the 
unique identification code and signal. This code is then 
output to a display unit 53 to display the identification code 
to an operator. The tag detector 13 is powered by a battery 
52. 

[0045] In this unit the mere display of the identification 5 
code for a located tag is sufficient since it enables the search 
and rescue personnel to contact the control center 6 in order 
to identify the wearer of the tag. This enables the search and 
rescue personnel to check whether they have located the 
person who was reported missing. They may actually have 
located some one who was not reported missing but who 
nevertheless needs to be rescued. They would thus need to 
resume the search for the person who was reported missing. 

[0046] The tag detectors 9 and 13 are more sensitive than 
15 the lag detector 4 and thus have a much greater range 
enabling their use in the detection of tags in the skiing areas. 

[0047] As can be understood from the description of the 
embodiment of the present invention, one aspect of the 
present invention provides-for a complete ski resort man- 
agement system which is capable of controlling access to ski 
lifts, monitoring access to danger areas such as closed runs, 



off piste areas, avalanche danger areas etc., and enabling an 
efficient search and rescue operation when skiers are 
reported missing. This is facilitated by the use of the tag 
detection system having a limited range for use as a ski lift 
access control system and of a much greater range for use as 
a search and rescue system. The preferred system provided 
is inexpensive since it uses signals which are of low power 
and below the threshold at which licenses are required from 
the authorities. 

[0048] Although in the specific embodiment described 
with reference to the drawings, the tag is an active tag having 
a battery, the present invention is equally applicable to a 
passive tag wherein the tag detectors are further equipped 
with a circuit for generating an activation signal which is 
transmitted to a region in which the tag is to be detected. For 
the tag detectors 4 for access control, the range of transmis- 
sion of the activation signal can be restricted to the region 
around the entrance 3. For the tag detectors 9 and 13, the 
range of the activation signal is much greater in order to 
provide a greater tag detection range. When the passive tag 
of this alternative embodiment detects the activation signal, 
it retransmits or reflects the signal modified by the unique 
identification code of the tag. This retransmitted or reflected 
signal can then be detected by the tag detectors. 

[0049] Although the embodiments have been described 
with reference to skiers, the present invention is applicable 
to any activity where there is a need to control access and to 
be able to locate persons in an emergency in an area such as 
on mountains, theme parks and game parks (wild life 
reserves). 

[0050] The tag could incorporate both passive and active 
chips where the two different types of readers detect either 
the passive or active port of the tag. 

[0051] The application of relatively inexpensive tags to a 
long range reading capability utilizing helicopter search 
t echniques m ay be used for search and rescue operations for 
w^llcefs^uclja^MLvBu^ls or groups lost on mountains. 
Although not specifically known by name or number, the aid 
to their recovery will be greatly enhanced with possible life 
saving consequences and reduction to the risk of hyperther- 
mia. 

[0052§£^&ltigprOT^ 

have been dSciibed with reference to a system for tagging 
persons in^resoEt, the present invention is applicable to the 
tagging of persons for whatever reason to detect the move- 
ment of the persons out of desired regions into undesired 
regions. For example, the tagging system can be used for 
tagging prisoners who are released into the community with 
restrictions^otijthgir movements. The tags can be used to 
monitor tfi^|moyements and warn of violations of the 

[0053] Also, the present invention is applicable to the 
tagging of passengers in an airport by way of tagging the 
boarding cards. Currently, one of the major problems in 
airport management is keeping track of passengers who are 
waiting to board an airplane. Passengers who leave desired 
regions into undesired regions, e.g. leave the terminal build- 
ing, can be detected in order to warn the airport managers. 

[0054] The personal tagging system is also applicable to 
search and rescue teams and firemen when carrying out their 
duties. Once the personnel leave the desired areas and 
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therefore enter restricted territory, these movements can be 
detected and a warning provided. Thereafter, the long range 
tagging system can be used to trace the personnel. 

[0055] Although the embodiments of the present invention 
described hereinabove have been described with reference to 
a tagging of persons, the present invention is not restricted 
to this, but is also applicable to the tagging of objects such 
as boats, cars, airplanes and containers. For example, in a 
marina application, boats can be tagged and when the boat 
is in the marina, this can be detected using a low range 
detector. When a boat leaves the marina without authority, a 
long range detection system can be used for detecting the 
location of the boat using the tag. A similar system can be 
used for detecting the unauthorized movements of cars, 
airplanes and containers. 

[0056] Although the present invention has been described 
hereinabove with reference to specific embodiments, it will 
be apparent to a skilled person in the art that modifications 
can be made without departing from the spirit and scope of 
the invention. 

1. A tagging system for persons or objects, the tagging 
system comprising: 

tags to be carried by the persons or objects, each tag being 
adapted to transmit a signal carrying an identification 
code unique to the tag; 

at least one first tag detector for arrangement at one or 
more entrances to areas, and for detecting the identifi- 
cation code carried by the signals from tags passing 
through the or each respective entrance, the detection 
region of said at least one first tag detectors being 
limited to the region of a respective said entrance; 

entrance processing means for processing the detected 
identification codes to generate an invalid tag signal if 
a received signal is invalid; 

at least one second tag detector for detecting the identi- 
fication code carried by the signal from tags in the 
areas, the detection range of said at least one second tag 
detector being substantially larger than said at least one 
first tag detector; and 

database means for holding infonnnation on respective 
persons or objects and said codes for tags being carried 
by respective persons or objects, and for identifying 
respective persons or objects using identification codes 
detected by said first and second detectors. 

2. A tagging system according to claim 1, wherein said at 
least one second tag detector includes at least one said 
second tag detector which is mobile for use for locating lost 
or incapacitated persons or objects. 

3. A tagging system according to claim 1, wherein said at 
least one second tag detector includes at least one said 
second tag detector for arrangement in the vicinity of one or 
more areas restricted for persons or objects; the system 
including monitoring means for monitoring detections by 
said at least one second tag detector to warn of any persons 
or objects in the vicinity of the or each restricted area. 

4. A tagging system according to claim 3, wherein each of 
said at least one second tag detector for arrangement in the 
vicinity of the or each restricted area includes radio trans- 
mitters for transmitting data on detection of tags to said 



monitoring means, and said monitoring means includes a 
radio receiver for receiving the data. 

5. A tagging system according to claim 1, wherein said at 
least one second tag detector has a range of at least 150 m. 

6. A tagging system according to claim 1, wherein each 
said tag is active and includes power supply means, a circuit 
for generating an electromagnetic signal using power from 
said power supply means, and an antenna for transmitting 
the electromagnetic signal; and said first and second tag 
detectors are adapted to receive the transmitted electromag- 
netic signals from the tags. 

7. A tagging system according to claim 6, wherein each 
said tag is adapted to transmit low frequency radio waves at 
a level below that at which a licence is required from 
authorities. 

8. A tagging system according to claim 1, wherein each 
tag is passive and is adapted to respond to an activation 
signal to transmit said signal; and said first and second tag 
detectors are adapted to transmit said activation signal and 
receive said signal from each tag. 

9. A tagging system according to claim 8, wherein said at 
least one first tag detector is adapted to transmit said 
activation signal only within the region of a respective said 
entrance, and said at least one second tag detector is adapted 
to transmit said activation signal over a larger range. 

10. A tagging system according to claim 1, wherein said 
at least one second tag detectors are substantially more 
sensitive to said signals from said tags than said at least one 
first tag detectors. 

11. A tagging system according to claim 1, wherein each 
tag includes a smart card in a carrier, said smart card storing 
monetary value information for purchasing goods and ser- 
vices. 

12. A method of tagging persons or objects comprising: 

providing each person or object with a tag transmitting a 
signal carrying an identification code unique to the tag; 

detecting identification codes carried by signals from tags 
passing through one or more entrances to areas using at 
least one first tag detector which has a detection region 
limited to the region of the respective entrance; 

processing the detected signals to generate an invalid tag 
signal if a received signal is invalid; 

detecting identification codes carried by signals from tags 
in the areas using at least one second tag detector which 
has a detection range which is substantially larger than 
the or each first tag detector; and 

identifying respective persons or objects using identifica- 
tion codes detected by said first and second detectors 
and a database of information on respective persons or 
objects and said codes for tags being earned by respec- 
tive persons or objects. 

13. A method according to claim 12, wherein at least one 
of the second tag detectors is mobile and is used for locating 
and identifying lost or incapacitated persons or objects. 

14. A method according to claim 12, wherein at least one 
of the second tag detectors is arranged in the vicinity of one 
or more areas restricted for persons or objects and detections 
of the signals from tags by the or each second tag detector 
in the vicinity of the or each restricted area is monitored and 
used to warn of any persons or objects in the vicinity of the 
or each restricted area. 
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15. A method according to claim 14, wherein the or each 
second tag detector arranged in the vicinity of the or each 
restricted area transmits data on detection of tags to a 
monitoring station at which the data is received using a radio 
receiver for performing the monitoring step. 

16. A method according to claim 12, wherein the or each 
second tag detector has a detection range of at least 150 m. 

17. A method according to claim 12, wherein each tag is 
active and actively generates an electromagnetic signal for 
receipt by said first and second tag detectors. 

18. A method according to claim 17, wherein the electro- 
magnetic signal comprises low frequency radio waves at a 
level below that at which a licence is required from authori- 
ties. 

19. A method according to claim 12, wherein each tag is 
passive and responds an activation signal which is transmit- 
ted from said first and second tag detectors to transmit said 
signal. 

20. A method according to claim 19, wherein said first tag 
detector transmits said activation signal only within the 
region of a respective said entrance and said at least one 
second tag detector transmits an activation signal over a 
larger range. 

21. A method according to claim 12, wherein the or each 
second tag detectors are substantially more sensitive to said 
signal from said tags than the or each first tag detector. 

22. A resort management comprising: 

tags to be carried by persons in the resort, each tag being 
adapted to transmit a unique signal to identify the 
person carrying it and including readable storage means 
for storing monetary value information; 

tag detectors for detecting tags within the vicinity thereof; 

information processing means for receiving tag detections 
to form and store data on the location of persons; 

tag issuing means for issuing tags to persons, said tag 
issuing means being adapted to input information on 
the persons to said information on the persons to said 
information processing means; and 

storage reading means for reading said storage means of 
said tags, said storage reading means being adapted to 
adjust the monetary value information carried by the 
storage means and to input information on the adjust- 
ment of the monetary value information to said infor- 
mation processing means; 

wherein said information processing means is adapted to 
link the data on the location of persons, and the 
corresponding information on the adjustment of the 
monetary value information. 

23. A resort management system according to claim 22, 
wherein said tag issuing means comprises at least one 
automatic vending machine. 

24. A resort management system according to claim 22, 
wherein said readable storage means comprises a smart card 
carried by said tag. 

25. A resort management system according to claim 24, 
wherein said smart card is removable from said tag. 

26. A resort management system according to claim 22, 
wherein said tags are adapted to transmit a signal carrying an 
identification code as said unique signal; said tag detectors 
comprise at least one first tag detector for arrangement at one 
or more entrances to areas and for detecting the identifica- 



tion code carried by the signals from tags passing through 
the or each respective entrance, the detection region of said 
at least one first tag detectors being limited to the region of 
a respective said entrance, and at least one second tag 
detector for detecting the identification code carried by the 
signal from tags in the areas, the detection range of said at 
least one second tag detector being substantially larger than 
said at least one first tag detector; and said information 
processing means includes database means for holding 
information on respective persons and said codes for tags 
being carried by respective persons, and for identifying 
respective persons using identification codes detected by 
said first and second detectors. 

27. A resort management system according to claim 26, 
wherein said at least one second tag detector includes at least 
one said second tag detector which is mobile for use for 
locating lost or incapacitated persons. 

28. A resort management system according to claim 26, 
wherein said at least one second tag detector includes at least 
one said second tag detector for arrangement in the vicinity 
of one or more areas restricted for persons; the system 
including monitoring means for monitoring detections by 
said at least one second tag detector to warn of any persons 
in the vicinity of the or each restricted area. 

29. A resort management system according to claim 28, 
wherein each of said at least one second tag detector for 
arrangement in the vicinity of the or each restricted area 
includes radio transmitters for transmitting data on detection 
of tags to said monitoring means, and said monitoring means 
includes a radio receiver for receiving the data. 

30. A resort management system according to claim 26, 
wherein said at least one second tag detector has a range of 
at least 150 m. 

31. A resort management system according to claim 26, 
wherein each said tag is active and includes power supply 
means, a circuit for generating an electromagnetic signal 
using power from said power supply means, and an antenna 
for transmitting the electromagnetic signal; and said first and 
second tag detectors are adapted to receive the transmitted 
electromagnetic signals from the tags, 

32. A resort management system according to claim 31, 
wherein each said tag is adapted to transmit low frequency 
radio waves at a level below that at which a licence is 
required from authorities. 

33. A resort management system according to claim 26, 
wherein each tag is passive and is adapted to respond to an 
activation signal to transmit said signal; and said first and 
second tag detectors are adapted to transmit said activation 
signal and receive said signal from each tag. 

34. A resort management system according to claim 33, 
wherein said at least one first tag detector is adapted to 
transmit said activation signal only within the region of a 
respective said entrance, and said at least one second tag 
detector is adapted to transmit said activation signal over a 
larger range. 

35. A resort management system according to claim 26, 
wherein said at least one second tag detectors are substan- 
tially more sensitive to said signals from said tags than said 
at least one first tag detectors. 

36. A resort management method comprising: 

issuing tags to be carried by persons, each tag being 
adapted to transmit a unique signal to identify the 
person carrying it and including readable storage means 
for storing monetary value information; 
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inputting information on the persons issued with tags to 
information processing means; 

detecting tags in the vicinity of tag detection in the resort; 

inputting tag detection information to said information 
processing means to form and store data on the loca- 
tions of persons; 

reading said storage means of said tags to adjust the 
monetary value information carried by the storage 
means; 

inputting information on the adjustment of the monetary 
value information to said information processing 
means; and 

linking the data on the persons, the locations of the 
persons and the corresponding information on the 
adjustment of the monetary value information. 

37. A resort management method according to claim 36, 
wherein each said tag transmits a signal carrying an identi- 
fication code unique to the tag; the step of detecting tags 
comprises detecting identification codes carried by signals 
from tags passing through one or more entrances to areas 
using at least one first tag detector which has a detection 
region limited to the region of the respective entrance, and 
detecting identification codes carried by signals from tags in 
the areas using at least one second tag detector which has a 
detection range which is substantially larger than the or each 
first tag detector; and the identifying means identifies 
respective persons using identification codes detected by 
said first and second detectors and a database of information 
on respective persons and said codes for tags being carried 
by respective persons. 

38. A resort management method according to claim 37, 
wherein at least one of the second tag detectors is mobile and 
is used for locating and identifying lost or incapacitated 
persons. 

39. A resort management method according to claim 37, 
wherein at least one of the second tag detectors is arranged 
in the vicinity of one or more areas restricted for persons and 
detections of the signals from tags by the or each second tag 
detector in the vicinity of the or each restricted area is 
monitored and used to warn of any persons in the vicinity of 
the or each restricted area. 

40. A resort management method according to claim 39, 
wherein the or each second tag detector arranged in the 
vicinity of the or each restricted area transmits data on 
detection of tags to a monitoring station at which the data is 
received using a radio receiver for performing the monitor- 
ing step. 

41. A resort management method according to claim 37, 
wherein the or each second tag detector has a detection range 
of at least 150 m. 



42. A resort management method according to claim 37, 
wherein each tag is active and actively generates an elec- 
tromagnetic signal for receipt by said first and second tag 
detectors. 

43. A resort management method according to claim 42, 
wherein the electromagnetic signal comprises low frequency 
radio waves at a level below that at which a licence is 
required from authorities. 

44. A resort management method according to claim 37, 
wherein each tag is passive and responds an activation signal 
which is transmitted from said first and second tag detectors 
to transmit said signal. 

45. A resort management method according to claim 44, 
wherein said first tag detector transmits said activation 
signal only within the region of a respective said entrance 
and said at least one second tag detector transmits an 
activation signal over a larger range. 

46. A resort management method according to claim 37, 
wherein the or each second tag detector is substantially more 
sensitive to said signal from said tags than the or each first 
tag detector. 

47. A tagging system for persons or objects, the tagging 
system comprising: 

tags to be carried by the persons or objects, each tag being 
adapted to transmit a signal carrying an identification 
code unique to the tag; 

at least one first tag detector for arrangement in the 
vicinity of one or more areas and for detecting identi- 
fication codes carried by signals from tags in the 
vicinity of said areas, the detection region of said at 
least one first tag detectors being limited to said areas; 

processing means for processing the detected signals to 
determine when persons or objects are in the vicinity of 
the area; 

at least one second tag detector for detecting the identi- 
fication codes carried by signals from tags away from 
said areas, the detection range of said at least one 
second tag detector being substantially larger than said 
at least one first tag detector; and 

database means for holding information on respective 
persons or objects and said codes for tags being carried 
by respective persons or objects, and for identifying 
respective persons or objects using identification codes 
detected by said first and second detectors. 

***** 
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[57] ABSTRACT 

Accessory apparatus for authenticating articles is used in 
conjunction with existing readers or scanners of articles 
bearing stored data, such as credit cards or identification 
cards. The accessory apparatus is disposed before, after, on, 
under, inside, or adjacent to existing reader apparatus, to 
have a view of the article whose data is to be read. Infor- 
mation in addition to the stored data is coded on the article 
in non-visible indicia and is detected by the accessory 
authenticating apparatus. This coded additional information 
may be related to identification data stored in the article by 
the article's normal storage mechanism, such as a magnetic 
stripe or an embedded memory IC chip. The additional 
information may be coded in various combinations of pre- 
determined characteristics of Light emitted by the article to 
be authenticated when the article is irradiated with non- 
visible light from the accessory apparatus. The code com- 
binations are preferably complex combinations of the vari- 
ous radiation characteristics. The article is irradiated at a 
high enough frequency (above 10,000 Hz modulation) for 
rapid determination of authenticity, and for reading and 
decoding standard bar codes. Visible and/or audible indica- 
tors alert a user when the authentication process detects an 
invalid card. With certain arrangements, an invalid card may 
be blocked from being read by the existing reader or scanner. 
The accessory apparatus may be connected to interrupt the 
normal communication channel of the existing reader or 
scanner with which it is used, when an article fails to be 
authenticated. , The accessory apparatus may be used as an 
adjunct to existing readers or scanners of information on 
such cards or other articles, to perform authentication func- 
tions without replacing or obsoleting such existing readers 
or scanners. 

46 Claims, 6 Drawing Sheets 
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METHODS AND APPARATUS FOR 
AUTHENTICATING DATA STORAGE 
ARTICLES 

FIELD OF THE INVENTION 5 

This invention relates to methods and apparatus for 
authenticating data storage articles such as credit cards 
bearing recorded information. It relates particularly to aux- 
iliary methods and to accessory apparatus that may be used 10 
as adjuncts to existing readers or scanners of information on 
such cards or other articles, to perform authentication func- 
tions without replacing or obsoleting such existing readers 
or scanners. 

15 

BACKGROUND OF THE INVENTION 

With ever-increasing use of cards of various types for 
carrying information, for identification, and for authorizing 1Q 
financial transactions, there has also been an increased 
incidence of fraud and forgery in which counterfeit cards are 
used. The annual cost of credit-card forgery alone has been 
reported in the hundreds of millions of dollars ("Business 
Week" Apr. 4, 1994, page 95), despite many attempts to ^ 
prevent fraud by various means to authenticate credit cards. 
Cards other than credit cards are used to carry coded 
information about the identity of individuals, their licenses 
to drive automobiles or to operate other equipment, their 
authorization for access to restricted facilities, their eligibil- 3Q 
ity for various services such as medical care, etc. Such 
"credit card'* size data storage articles include identification 
and security cards (drivers license, employee ID cards, 
badges, access control cards, immigration cards, etc.), finan- 
cial and transaction cards (credit cards, debit cards, ATM 
cards, phone cards, subway cards, etc.), data cards (medical 
information, insurance and benefit information cards, car 
registration, etc.), telecommunication technician test cards, 
smart cards, computer memory cards, etc. Such cards may 
be subject to the same methods of counterfeiting as those ^ 
used for credit cards. With technical advances and easy 
access to technologies such as personal computers, graphic 
software, image scanners, laminating equipment, credit card 
impact printers, instant-print cameras, and other card-mak- 
ing materials and equipment, a counterfeiter can easily forge 45 
such cards including most visible security features employed 
on them. Examples of such visible security features which 
can be replicated by counterfeiters are patterned back- 
grounds, holograms, pictures, and fingerprints. Therefore, 
there is a need to provide additional security features that 5Q 
cannot be duplicated with technologies based on visible 
features, and a need to provide automatic authentication that 
does not rely on human subjective judgment. 

The current installed base of credit card readers in the 
U.S. and Canada alone is estimated at over 40 million units 55 
according to the American Bankers Association. World-wide 
installations of all types of card readers easily exceed 
billions of dollars in equipment value. Therefore, it is highly 
desirable to provide an add-on device to the existing readers 
that can detect invisible security features. go 

Thus there is an important and continuing need to prevent 
fraud based on counterfeit data storage articles, particularly 
data storage articles in the form of a card. At the same time, 
business enterprises and especially retail establishments, 
have invested in millions of card readers and/or scanners. It 65 
is highly desirable to have methods and apparatus for 
authentication of cards that would not require businesses to 
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replace their existing card readers or existing scanners with 
a new type of authenticating reader or scanner. 

NOTATIONS AND NOMENCLATURE 

In this specification the expressions "non-visible light" 
and "non- visible radiation" will refer to light radiation with 
a peak wavelength outside the spectral range normally 
visible to the human eye. Such "non-visible light" may also 
include a broad enough wavelength range that a minor 
portion of its spectral composition may also fall within the 
boundaries of the visible spectrum. The visible spectrum 
extends from about 400 nanometers to about 700 nanom- 
eters. An example of a source of non-visible light in this 
sense is a high-pressure mercury lamp. 

"Data storage card" and "data storage article" both refer 
to articles in which information is stored Such articles need 
not necessarily have the form of a card, but can have other 
forms such as tags, badges, tapes, disks, tickets, checks, 
certificates, and coupons. Among those data storage articles 
in the form of a card or tag, the information readable by an 
existing reading device may be encoded in a variety of ways 
including magnetic stripes, characters printed in magnetic 
ink, characters readable by OCR equipment, embossed 
characters, visible or invisible bar codes, RF transponder 
characteristics, images, holograms, and others. The infor- 
mation stored in articles of other forms may be stored by any 
of the physical mechanisms employed for such articles. 

DESCRIPTION OF THE RELATED ART 

Many methods have been described for preventing coun- 
terfeiting or fraudulent use of cards bearing stored data. A 
few examples of these are listed here. Fant et al. described 
an infrared transparent credit card ("Infrared Transparent 
Credit Card/' IBM Tech. Disci Bulletin, Vol. 9, No. 7, 
December 1966, p. 870). U.S. Pat. No. 3,585,593 (Roberts, 
1971) disclosed a device for identifying credit cards using 
coded holes punched in the card in accordance with a code 
given only to the legal owner of the card. Greenway (U.S. 
Pat No. 4,119,361, 1978) disclosed a multilayer identifica- 
tion card containing fine-structure optical markings readable 
with infrared light through a protective layer which is 
opaque to lesser wavelengths. U.S. Pat. No. 4,202,491 
(Suzuki, 1980) describes a data card containing data 
recorded with a fluorescent material that emits infrared rays 
when excited by infrared rays. U.S. Pat. No. 4,538,059 
(Rudland, 1985) discloses an identification card with con- 
cealed coding made by infrared transparent windows of two 
widths providing binary coding readable by infrared radia- . 
tion through material opaque to visible light. U.S. Pat. No. 
4,694,148 (Diekemper et al., 1987) shows an access card 
having coded markings which appear in an infrared receiver 
under infrared radiation, having a photosensitive layer, and 
having a surface layer not transparent to visible light. U.S. 
Pat No. 4,873,427 (Virdia, 1989) uses a plastic card with an 
integrated memory circuit and with infrared-transparent 
layers over identification codes readable by transmission of 
infrared light. 

In U.S. Pat. No. 4,897,531 (1990), Someya et al. disclose 
a data identifying system that reads a data card magnetic 
stripe, and reads an optical ROM card containing data 
regarding invalid cards to determine whether the data card is 
invalid. U.S. Pat. No. 4,908,516 (West, 1990) discloses 
apparatus and a process that irradiates an article such as a 
card having magnetic data storage with predetermined radia- 
tion and determines whether detected radiation has pre- 
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scribed spectral characteristics. West's apparatus controls an 
integral magnetic detecting head according to the result of 
radiation detection. U.S. Pat. No. 4,972,476 (Nathans, 1990) 
discloses an ID card bearing a scrambled facial image. U.S. 
Pat. No. 5,095,194 (Barbanell, 1992) discloses a holo- 
graphic credit card that stores a unique identification such as 
a fingerprint of the authorized user in the form of a holo- 
gram. U.S. Pat. No. 5,104,149 (Hoppe, 1992) has a security 
print covering the surroundings of a signature field and 
extending continuously across the signature field as well. 
U.S. Pat. No. 5,151,582 (Fujioka, 1992) uses light-emitting 
elements and image sensors of reflected light to read and 
check the embossed information on a card. Gross et ah, 
(PCT Publication No. WO 92/08211, 1992) describe an 
access control device using a number of machine-readable 
data substrates bearing access authorizations in coded form, 
but readable only by different reading devices. U.S. Pat. No. 
5,1 80,901 (Hiramatsu, 1993) discloses a pressure sensor and 
an authenticity sensor arranged on the surface of an IC card. 
U.S. Pat. No. 5,180,902 (Schick et al., 1993) shows a 
self-verifying transaction card having a self-contained key- 
board or keypad. U.S. Pat. No. 5,202,930 (livshitz et al., 

1993) uses correlation function analysis on the dynamics of 
a sample and reference signatures. U.S. Pat. No. 5,216,233 
(Kassens, 1993) uses an RF identification label alone or with 
any of a series of scanner modules for data capture. U.S. Pat. 
Nos. 5,270,526 and 5,321,276 (Yoshihara, 1993) show card- 
type recording media having plural types of inks which 
normally exhibit the same color visually, but have different 
optical characteristics under a predetermined condition pro- 
vided in blocks in a desired pattern. U.S. Pat. No. 5,239,166 
(Graves, 1993) uses secure data interchange between an 
intelligent card and a terminal, and uses erasure of data upon 
an invalid response. U.S. Pat. No. 5,305,383 (Guillou et al., 

1994) uses a system of numbered tokens with a chip card for 
electronic payment. U.S. PaL No. 5,311,594 (Penzias, 1994) 
describes a system using pre-stored authentication informa- 
tion, randomly requested of a card user at each transaction. 
U.S. Pat. No. 5,317,137 (Wilkins, 1994) discloses a system 
which magnetically writes a security code simultaneously 
with magnetic reading of a card, and validates or re- validates 
the card only if the same security code is present before 
completion of a transaction. U.S. Pat. No. 5,334,823 (Nob- 
lett, Jr. et al., 1994) discloses a system and methods for 
operating a data card terminal which include an embossed 
character reader, a magnetic stripe reader, and a signature- 
capture printer which digitizes and compresses signals cor- 
responding to the signature of a card-holder. 

Ronald S. Indeck et al. describe a method of detecting and 
analyzing a "signature" pattern of the minute magnetic 
particles of which a magnetic stripe is composed, which can 
be used for authenticating cards [Ruth Coxetcr, ed. "How 
Sour Notes Can Fight Credit Card Fraud" Business Week, 
Apr. 4, 1994, p. 95; G. Mian et al. "Noise Correlation of 
Magnetic Thin Film Media" Japanese Journal of Applied 
Physics, Part 2 (Letters) Vol. 30. No. 8B, pp. L1483-L1485 
(Aug. 15, 1991); and J. R. Hoinville et al. "Spatial Noise 
Phenomena of Longitudinal Magnetic Recording Media" 
IEEE Transactions on Magnetics, Vol. 28 No. 6, pp. 
3398-3406, November 1992J. . 

Various technologies such as surface acoustic wave 
(SAW) technology, encrypted radio-frequency-activated cir- 
cuits, and encrypted integrated circuits have been proposed 
as counterfeit protection features for the above-mentioned 
data storage articles. These offer many advantages, such as 
high memory capacity for data, field programmability, 
extended detection range, no requirement for "line of sight" 
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communication, and an ability to provide personalized 
codes. 

.... Many inventions have been made using light-emitting 
materials and corresponding dedicated detection systems. 
U.S. Pat. No. 4,642,526 (Hopkins, 1987) discloses an object 
recognition system using modulated ultraviolet light pro- 
duced by a self-modulated lamp. U.S. Pat. No. 4,889,365 
(Chouinard, 1989) discloses a counterfeit resistant label 
made by applying a selected code word as a series of marks 
in several locations on the label (using ink sensitive to light 
in the non-visible spectrum), and by masking the ink vis- 
ibility at all of the locations. U.S. Pat. No. 4,889,367 (Miller 
1989) has a multi-readable information system, using bar 
codes in an ink readable by light of a first wavelength and 
using human-readable symbols printed on the same area 
with humanly visible ink. 

A persistent problem in the related art is that the solutions 
require revolutionary change in reading equipment and 
installation of new equipment. Not only do the previously 
proposed solutions require very substantial investment in 
new technologies and equipment, but also many require 
obsolescence of existing data reading or processing appara- 
tus and related systems. 

PROBLEMS SOLVED BY THE INVENTION 

The problems solved by this invention include, among 
others, the inadvertent acceptance of fraudulent data storage 
articles counterfeited by readily available replication meth- 
ods. These data storage article include all the types of credit, 
debit, and identification cards mentioned above. While there 
have been other solutions to this problem, this invention 
avoids the high cost of prior solutions that require expensive 
cards, or entirely new card readers, and the high cost of 
obsoleting existing reader equipment that is still functional. 
This is solved by having apparatus retrofitable to existing 
readers. Another problem solved is the reliance on subjec- 
tive human judgment required to detect and recognize 
visible authentication markings. The use of complex authen- 
tication criteria which are also non-visible, rather than 
simpler criteria using only one or two visible variables, 
further enhances the reliability of the present solution in 
detecting counterfeit data cards and the like. The problems 
of slow authentication and/or unreliable recognition of bar 
codes or other indicia are solved by the use of high fre- 
quency modulation in the present invention. 

OBJECTS AND ADVANTAGES OF THE 
INVENTION 

A general object of this invention is to provide improved 
security in systems using data storage articles. A particular 
object of this invention is a method for authenticating data 
storage articles for use in conjunction with existing data 
readers. A related object is an apparatus that can be used in 
conjunction with existing card readers for authenticating 
data storage cards. Another related object is an apparatus 
that can be used in conjunction with existing scanners of bar 
codes or of OCR-recognizable characters. Other related 
objects are methods and apparatus that can be used to 
augment the counterfeit-protection security of systems using 
existing card readers, scanners and information processing 
systems. Yet another object of this invention is to add the 
capability of detecting invisible codes to existing systems 
that scan visible indicia on data storage articles. A related 
object is to augment the capabilities of existing card reading, 
scanning, and information processing systems by allowing 
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reading of additional information from data storage cards. 
Another object is to provide improved detection capability 
to existing card readers, scanners and information process- 
ing systems. Related objects are methods and apparatus that 
can operate in conjunction with various types of existing 5 
card reading, scanning, and information processing systems, 
which read various types of data, and which utilize various 
physical principles. Other objects are authentication meth- 
ods and apparatus that do not obsolete existing card reading 
or scanning apparatus and do not require them to be 10 
replaced. Another object is authentication apparatus that can 
be installed with no modification or with only minimal 
modification of existing card reading, scanning, or informa- 
tion processing equipment. Another object is authentication 
apparatus that can operate at high speed, to allow timely 15 
determination of authenticity while a data storage article is 
being read by an existing reader. Another object is authen- 
tication apparatus that utilizes existing communication capa- 
bilities of existing card reading, scanning, or information 
processing equipment. Other objects are authentication 20 
methods and apparatus that can prevent the completion of a 
transaction by existing card reading, scanning, or informa- 
tion processing equipment when a data storage article is not 
authenticated. Another object is a physically compact 
authentication apparatus. Another object is an apparatus that 25 
is easy to align with existing card readers, scanners, or 
information processing equipment. Another object is authen- 
tication apparatus that is relatively inexpensive to manufac- 
ture and to install. 

30 

SUMMARY OF THE INVENTION 

Accessory apparatus for authenticating articles is used in 
conjunction with existing readers or scanners of articles 
bearing stored data, such as credit cards or identification 35 
cards. The accessory apparatus is disposed before, after, on, 
under, inside, or adjacent to existing reader apparatus, to . 
have a view of the article whose data is to be read. Infor- 
mation in addition to the stored data is coded on the article 
in non-visible indicia and is detected by the accessory 40 
authenticating apparatus. This coded additional information 
may be related to identification data stored in the article by 
the article's normal storage mechanism, such as a magnetic 
stripe or an embedded memory chip. The additional infor- 
mation may be coded in various combinations of predeter- 45 
mined characteristics of light emitted by the article to be 
authenticated when the article is irradiated with non-visible 
light from the accessory apparatus. The code combinations 
are preferably complex combinations of the various radia- 
tion characteristics. Particularly useful characteristics are 50 
unique combinations of wavelengths, combinations of abso- 
lute or relative intensities, emission time delays, and spatial 
patterns such as bar-codes or array codes. The article is 
irradiated at a high enough frequency (above 10,000 Hz 
modulation) for rapid determination of authenticity, and for 55 
reading and decoding standard bar codes. Visible and/or 
audible indicators alert a banker, merchant or other user 
when the authentication process detects an invalid card, 
With certain arrangements, an invalid card may be blocked 
from being read by the existing reader. The accessory 50 
apparatus may be connected to interrupt the normal com- 
munication channel of the existing reader or scanner with 
which it is used, when an article fails to be authenticated. 

Other objects, features, and advantages will become 
apparent from the detailed description of the preferred 65 
embodiment examples and their illustrations in the draw- 
ings. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a functional schematic diagram of a first 
embodiment made in accordance with the present invention. 

FIG. 2 is a functional schematic diagram of a second 
embodiment 

FIG. 3 is a functional schematic diagram of a first 
preferred embodiment. 

FIG. 4 is a perspective drawing of a second preferred 
embodiment 

FIG. 5 is a perspective drawing showing the embodiment 
of FIG. 4 in relation to the existing apparatus with which it 
is used. 

FIG. 6 is a perspective drawing of a third preferred 
embodiment 

FIG. 7 is a perspective drawing showing the embodiment 
of FIG. 6 in relation to the existing apparatus with which it 
is used. 

FIG. 8 is a perspective drawing of a fourth preferred 
embodiment. 

FIG. 9 is a perspective drawing showing the embodiment 
of FIG. 8 in relation to the existing apparatus with which it 
is used. 

FIG. 10 is a perspective drawing of a fifth preferred 
embodiment 

FIG. 11 is a perspective drawing showing the embodiment 
of FIG. 10 in relation to the existing apparatus with which 
it is used. 

FIG. 12 is a schematic diagram of an embodiment of an 
optical subsystem made in accordance with the invention. 

FIG. 13 is a schematic diagram of another embodiment of 
an optical subsystem 

FIG. 14 is a schematic diagram of an electronic subsystem 
used in an embodiment, 

FIG. 15 is a partially cutaway perspective drawing of a 
detail of an alternative embodiment 

FIG. 16 is a perspective drawing of a detail of another 
alternative embodiment 



DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS 

The authentication method of the present invention is 
intended to be used with existing card-reading means, such 
as existing "swipe readers" commonly used to read credit 
cards or debit cards. The data storage cards used in this 
method have at least two sets of indicia or codes containing 
data. One set consists of the indicia or codes readable by 
existing card-reading means. A second set consists of indicia 
that are invisible when irradiated with light in the visible 
spectrum but are detectable when irradiated with non-visible 
light. An add-on apparatus is used to irradiate data storage 
cards with non-visible light, detecting the non- visible indicia 
to determine the authenticity (or lack of authenticity) of the 
data storage card. In one variation of the method, each data 
storage card is exposed to the existing card-reading means to 
read the codes that the existing reader can read, and the 
resulting output of the existing reader is either allowed to 
pass or blocked. In another variation, the existing reader is 
allowed to read each data storage card only if that data 
storage card is authentic. TTiis is accomplished by physically 
blocking entry of the card from the existing reader with a 
mechanical stop actuated by a failed. authentication signal, 
by sending an enabling signal to the existing reader, or by 
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controlling the power input to the existing reader. In a 
method where the existing reader is allowed to read the card 
and its normal data output is allowed to pass, an authenti- 
cation code can be added to that data stream. The authen- 
tication code can be as short as one binary bit appended or 5 
prefixed to the existing reader output, indicating either 
authentication or failure of authentication. One simple 
method of determining authenticity utilizes a pre-defined 
relationship between the codes read by the existing reader 
and the non-visible codes read by the add-on apparatus, 
giving a positive authentication result if the relationship is 10 
true for the specific data storage card being tested. 

In general, the detection or reading of the non- visible 
codes by the add-on apparatus can occur before, after, or 
simultaneously with reading of the visible of magnetic codes 
by the existing reader. In a preferred method, the non-visible 
codes are detected by modulating the non-visible light at a 
predetermined high frequency (preferably above 10,000 
Hertz), and the fluorescent light excited by the irradiation is 
selectively detected at the modulation frequency. All of the 2Q 
methods described above can be used with existing readers 
of many types, including magnetic stripe readers; optical 
character recognition (OCR) readers, bar-code scanners, 
magnetic character readers, CD-ROM drives, and the like. 

FIG. 1 is a functional schematic diagram illustrating a first 25 
embodiment of apparatus made in accordance with the 
present invention. An existing reader 20 normally reads a 
data storage article 10, such as a credit or identification card, 
typically making use of magnetic or optical coding of the 
data stored in data storage article 10. Data storage article 10 30 
bears two kinds of information: the existing stored data 110 
typically coded in magnetic or visible optical form, and 
additional indicia 120 made for the purpose of authentica- 
tion by the present invention. Indicia 120 are not visible 
when illuminated only by light in the visible spectrum. They 35 
may be designated "non-visible codes." The existing reader 
apparatus 20 has an existing decoder 40, which typically 
processes signals detected by existing reader to decode the 
signals into digital data. Decoder 40 may be and often is an 
integral part of existing reader apparatus 20, but is shown as 40 
distinct in FIG. 1 to clarify its function. In existing appli- 
cations, decoder 40 would normally be connected directly to 
a modem 60 or to a communication terminal to communi- 
cate the decoded data to a remote location for authorization 
of a transaction, using a communication channel 70, which 45 
could be a telephone connection to a remote computer, for 
example. For understanding the invention, it is convenient to 
think of the example of an existing reader 20 as a magnetic 
stripe reader, with a slot through which a user such as a retail 
merchant passes a credit card. Its decoder 40 might be 50 
integrated in the same outer housing, and it might commu- 
nicate with a remote host computer through a modem 60 
when a merchant dials to the remote computer. 

In accordance with the present invention, an add-on probe 
30 is attached to existing reader 20, or placed adjacent to it 55 
as shown in HG. 1. Add-on probe 30 must have an optical 
view of at least a selected portion of data storage article 10 
for both irradiation of that portion and detection of light 
from it. Add-on probe 30 acts in conjunction with the 
existing reader 20, and with a base system 50, a relay switch 60 
80, and an over-ride 90 to authenticate a data storage article 
10 presented to the existing reader 20. Add-on probe 30 
comprises a housing, a high-frequency modulated source of 
non- visible light, one or more detectors of fluorescent light 
excited by that light source, an optical system including 65 
wavelength-selective filters, fiber-optic elements carrying 
both the non- visible irradiating light and the fluorescent light 
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excited by it, and a wiring cable carrying both excitation for 
the light source from base system 50 and detected signals to 
base system 50. Base system 50 comprises a source of 
excitation for the irradiating source, electronic signal pro- 
cessing circuitry, an indicator 55, and at least one electrical 
output. Indicator 55 may be an audible indicator and/or a 
visible display for indicating to the user whether or not the 
data card or other data storage article was authenticated. 
Over-ride 90 allows a user to over-ride normal operation by 
manual intervention in unusual circumstances, such as 
equipment malfunction or direct authorization of a transac- 
tion. Base system 50 may be integrated with add-on probe 
30 in a single housing. In any event, the housing of add-on 
probe 30 is adapted to fit the physical characteristics of 
existing reader 20 as later examples will show in more 
detail. 

In FIG. 1, base system 50 communicates with relay switch 
80, which gates the normal output from existing decoder 40, 
which is typically a communication output. If the electronic 
signal processing circuitry of base system 50 produces a 
positive authentication signal, relay switch 80 passes the 
output of decoder 40 to modem 60. If base system 50 fails 
to authenticate the card, relay switch 80 may block the 
transmission of data from decoder 40 to modem 60, and may 
also send a 'Tailed authentication" signal to modem 60 in 
place of (or in addition to) the existing reader's data, to be 
transmitted over communication channel 70 to a remote 
• location. Simply blocking the transmission of data from the 
existing reader can prevent the transaction from being 
completed with an invalid card, but transmission of the data 
in addition to a failed authentication signal can inform the 
remote computer of the association of that data with failed 
authentication. That combined information can be used to 
prevent further authorizations for the same invalid card in 
future transactions. 

Add-on probe 30 and base system 50 may be constructed 
using high frequency modulated sources, wavelength-selec- 
tive filters, optical components, fluorescent-light detectors, 
and signal-processing electronics as described below with 
reference to FIGS. 3, 12, 13 and 14. It will be apparent from 
those descriptions that various ways of partitioning the 
apparatus between add-on probe 30 and base system 50 are 
possible. 

FIG. 2 is a functional schematic diagram of a second 
embodiment The embodiment illustrated in FIG. 2 operates 
similarly to that of HG. 1, except that a provision is added 
for changing the program of base system 50 upon instruc- 
tions 230 transmitted from a host computer or remote 
terminal through modem 240. In an application to existing 
apparatus, such as an ATM machine having a local computer 
controller, that computer may be used to transmit instruc- 
tions 230 to base system 50. 

The major functional components of the apparatus of this 
invention may be partitioned between an add-on probe 30 
and a base system 50 in a number of ways for different 
applications. For most common applications, the first pre- 
ferred embodiment has the partitioning shown in HG. 3, 
which illustrates what is believed to be the best mode of 
practicing the invention. In the partitioning shown in HG. 3, 
only a fiber-optic connection 35 is within the add-on probe 
30, carrying non- visible irradiating light to the data storage 
card 10 and carrying fluorescent light from non-visible 
codes 120 on the data storage card back to base system 50. 
All other major components are in base system 50. Base 
system 50 comprises an optical subsystem 130, an electronic 
subsystem 140, and its input/output port 150. Electrical 
connections are made from electronic subsystem 140 to 
relay 80 and to indicators 55. 



10/30/2003, EAST Version: 1.4,1 



5,548,106 



10 



FIG. 4 is a perspective drawing of a second preferred 
embodiment in which a housing 310 containing the func- 
tional elements of add-on probe 30 is adapted to fit against 
an existing reader 20 and automatically align to it Housing 
310 has a slot 320 similar to a slot in an existing magnetic 5 
or optical reader 20. Extended portions 340 of housing 310 
surround two sides of a recess 330 which fits existing reader 
20, and slot 320 is situated to align with slot 25 of existing 
reader 20, when housing 310 and existing reader 20 are 
adjacent. An interconnecting cable 350 connects add-on 
probe 30 to base system 50. FIG. 5 illustrates the embodi- 
ment of FIG. 4 in relation to the existing apparatus 20 with 
which it is used. (Existing apparatus 20 is shown with 
dashed lines.) This embodiment is used "upstream" of an 
existing reader: i.e. the data storage article is passed through 
the slot 320 before passing through slot 25. Slot 320 contains 15 
in at least one of its side walls the optical interface needed 
for add-on probe 30. In one arrangement of the type of 
apparatus shown in FIG. 4, illumination of the data storage 
article by non-visible light and detection of fluorescent light 
from invisible codes 120 is done on the surface of the article 20 
opposite the surface used for its existing magnetic or visible 
optical data. Fasteners of various types may be used to hold 
housing 310 and existing reader 20 together if needed. For 
example the housings could be attached with double-sided 
adhesive tape to a common base plate extending under both 25 
housings. 

FIG. 6 is a perspective drawing of a third preferred 
embodiment. This embodiment is similar to that of FIG. 4, 
but is designed to be used "downstream" from the existing 3Q 
reader: the data storage article is passed through ("swiped" 
through) slot 320 after passing through slot 25 of existing 
reader 20. Interconnecting cable 350 is shown at the bottom 
surface of housing 410 to illustrate an alternative arrange- 
ment of the light source and detector or fiber-optical link(s). 35 
In this embodiment, interconnecting cable 350 may be a 
fiber-optic cable. The light source and detector or fiber- 
optical link(s) may be positioned to illuminate an edge of the 
data storage card and to detect light excited at the card edge. 
This arrangement is used with cards having invisible coding ^ 
incorporated within a card in such a way that they are 
detectable at an edge of a card. Such cards might have coded 
fluorescent substances incorporated into all of the card 
substrate material or might have discrete layers incorporat- 
ing invisible codes detectable at their edges. There is no 45 
causal or other relationship between the two features illus- 
trated in FIG. 6 (downstream swipe and edge illumination/ 
detection) that would require them to be used together in the 
same embodiment. FIG. 7 is a perspective drawing showing 
the embodiment of FIG. 6 in relation to the existing appa- 5fl 
ratus 20 with which it is used. 

FIG. 8 is a perspective drawing of a fourth preferred 
embodiment. Housing 510 is similar to both housing 310 of 
FIG. 4 and housing 410 of FIG. 6, but has an aperture 530 
designed to contain and hold the entire existing reader 20. 55 
Side portions 540 and end portion 550 enclose the aperture 
to hold the existing reader 20 in place as illustrated in FIG. 
9. Slot 560 aligns with the slot 25 of existing reader 20 to 
provide an entrance or exit path for a data card or the like. 
Slot 320 also aligns with slot 25 and contains in a side wall 60 
the optical interface needed for the add-on probe 30. FIG. 9 
is a perspective drawing showing the embodiment of FIG. 8 
in relation to the existing apparatus with which it is used. 
The embodiment "of FIG. 8 and FIG; 9 may be used either 
upstream or downstream of existing reader 20. 55 

FIG. 10 is a perspective drawing of a fifth preferred 
embodiment for use with an existing optical scanner, and 
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FIG. 11 is a perspective drawing showing the embodiment 
of FIG. 10 in relation to the existing optical scanner appa- 
ratus. The embodiment of FIG. 10 has a housing 930 with a 
window 940 and an interconnecting cable 950. Housing 930 
contains an add-on probe 30, which in this embodiment 
incorporates a scanning function, Existing scanner 910 has 
a window 920 and interconnecting cable 915. Add-on probe 
housing 930 is attached to the existing scanner housing to 
align window 940 with existing scanner window 920, so that 
the scanner of add-on probe 30 can scan the same article 
being scanned by the existing scanner. 

FIG. 12 is a schematic diagram of an embodiment of an 
optical subsystem 130 made in accordance with the inven- 
tion. In the embodiment of FIG. 12, add-on probe 30 
includes the entire optical subsystem 130 shown. This is a 
different partitioning from the preferred partitioning shown 
in FIG. 3 and is used here for clarity in describing the optical 
subsystem. 

A data storage article 10 is moving through or past add-on 
probe 30, and carries non-visible codes 120. The optical 
subsystem 130 of FIG. 12 has a modulated source 1110 of 
non-visible light, and may optionally have a modulated 
source 1120 of visible and/or infrared light as well. Source 
1110 may be a UV source such as a high-pressure mercury 
lamp, for example. In FIG. 12, the electrical excitation of 
non-visible light source 1110 (and optionally 1120) comes 
from base system 50. Non-visible light source 1U0 may be 
self-modulating as in Hopkins U.S. Pat. No. 4,642,526. 
Non-visible light propagates through optical path 1115, 
fiber-optic interface 1145, and fiber-optic connection 35 to 
illuminate data storage article 10. (Fiber-optic elements may 
be used for other parts of optical path 1115 as well.) 
Fiber-optic interface 1145 may include a lens, aperture, or 
slit, as may the output end of fiber-optic connection 35. 
Fiber-optic connection 35 also carries fluorescent light 
excited by the non-visible light back along optical path 1115 
into add-on probe 30. With suitable fiber material and 
construction, the same optical fiber may be used for both 
non-visible irradiation light and for the fluorescent light 
emitted by non-visible codes 120. An optical filter 1150 
selects a portion of the fluorescent light to be detected by a 
detector 1140. The electrical output of detector 1140 is sent 
to base system 50 for interpretation, as described below with 
reference to FIG. 13. 

FIG. 13 is a schematic diagram of another embodiment of 
an optical subsystem 130. As in FIG. 12, add-on probe 30 
includes the entire optical subsystem. For the purpose of 
describing this subsystem, data storage article 10 is assumed 
to be stationary. This embodiment has a scanner 1160 for 
scanning a beam of non-visible light across a selected 
portion of data storage article 10. Scanner 1160 may be an 
oscillating mirror, for example, or any conventional scanner 
suitable for the non-visible irradiating light from source 
U10. FIG. 13 also shows optional beam splitter 1130, 
optionally plural optical filters 1150, and optionally plural 
detectors 1140. Fluorescent light from non- visible codes 120 
propagates along return optical path 1116. With either sin- 
gular or plural detectors 1140, each detector has an output 
signal channel, carried to base system 50 via an intercon- 
necting cable. As in the embodiment of FIG. 12, fiber-optic 
elements may be used for portions of optical path 1115 or 
return optical path 1116. 

FIG, 14 is a schematic diagram of electronic subsystem 
140 used in ah embodiment of base system 50. Base system 
50 has an input signal from the detector of 1140 of add-on 
probe 30. In versions that have multiple detectors 1140, a 
multiplexer 1175 multiplexes signals from the various detec- 
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tors channels. In versions with only a single detector, 
multiplexer 1175 is unnecessary. At analog-to-digital con- 
verter 1180 the detector analog signals are converted to 
digital signals. The digital signals are sent as inputs to 
memory 1190, microcomputer 1200 and recognition logic 5 
1170, which interpret the digital signals to, determine 
whether the invisible codes 120 detected correspond to 
authentic data storage articles. That determination is made 
under control of a program stored in a program memory 
associated with microcomputer 1200. Memory 1190, micro- 
computer 1200 and recognition logic 1170 are shown here as 
distinct elements, but it will be appreciated that their func- 
tions may all be performed by a microcomputer with on- 
board memory and particularly by a digital signal processor 
(DSP). The recognition logic or its equivalent microcom- 
puter program uses conventional recognition algorithms to 13 
recognize the codes represented by invisible codes 120. The 
result of determining authenticity of the data storage article 
is either positive (authenticated) or negative (not authenti- 
cated). The result is indicated to a user of this apparatus by 
indicators 55, preferably both audible and visible indicators. 20 
At the same time, the authentication result is used to control 
relay 80/In the simplest method, relay 80 is used either to 
allow the output of existing reader 20 to pass to modem 60 
if the authentication result is possible, or to block that output 
if the authentication result is negative. In other methods, the 25 
authentication result may be appended or prefixed to the 
normal output of existing reader 20, to inform a host system 
of the authentication result. Input/output port 1220 allows 
any input or output of microcomputer 1200, but especially 
for re-programming of the instructions of microcomputer 30 
1200, such as in using the program change instructions 230 
of FIG. 2. 

While the invention has been described in terms of 
particular partitioning of functions between an add-on probe 
30 and a base system 50, these partitionings were made to 35 
describe the invention more clearly. The various functions 
can be partitioned diflferendy between these two major 
portions of the apparatus without changing the operation of 
the invention. One way of re-partitioning the apparatus is to 
keep only a fiber-optic element as add-on probe 30, and 40 
partition all other components of the apparatus into base 
system 50. Another way of re-partitioning the apparatus is to 
put all of the elements in a single housing acting as the 
add-on probe 30, and integrating the base system 50 ele- 
ments into that single housing. 45 

FIG. 15 is a partially cutaway perspective drawing of a 
detail of an alternative embodiment in which add-on probe 
30 has an optical fiber connection 35 to existing reader 20. 
Optical fiber connection 35 passes through a hole drilled in 5Q 
the housing of existing reader 20, and terminates in a 
suitable optical terminal at the wall of slot 25. The termi- 
nation of optical fiber connection 35 may include a lens, 
aperture, or slit. The terminated end of optical fiber connec- 
tion 35 is disposed to illuminate a data storage card passing 55 
through slot 25 and to transmit fluorescent light from 
invisible codes 120 on the data storage card back to an 
optical filter 1150 and a detector 1140 in add-on probe 30. 

FIG. 16 is a perspective drawing of a detail of another 
alternative embodiment, in which optical fiber connection go 
35 is disposed adjacent to either the entrance end or exit end 
of slot 25 in existing reader 20. 

When any of these embodiments are used, add-on probe 
30 is placed adjacent to existing conventional reader 20 or 
attached to it. Most of the versions of add-on probe 30 align 65 
automatically with the slot or with the scan field of existing 
reader 20 (or 910). Otherwise add-on probe 30 is aligned to 
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allow the same data storage article, such as a data card, to be 
read by both the existing reader and add-on probe 30. The 
normal output of existing reader 20 is routed through relay 
80 as illustrated in FIGS. 1 or 2. Operation of base system 
50 is automatic, and may be programmed to either block the 
output of existing reader 20 when a data storage article is not 
authenticated, or to augment reader 20 output with an 
authentication code. An alternative method of using the 
invention is to allow a host system to make the determina- 
tion of authenticity on the basis of information transmitted 
by base system 50. This may be done, for example, by 
comparing detected invisible codes 120 with Redetermined 
codes, or with information codes received in the same 
transmission from existing reader 20, or by using some 
combination of these codes. 

Other embodiments of the invention will be apparent to 
those skilled in the art from a consideration of this specifi- 
cation or from practice of the invention disclosed herein. For 
example, the data storage articles to which the invention 
may be applied need not be cards, but can be any type of 
articles bearing data, such as computer magnetic storage 
disks, CD-ROM disks, magnetic digital data tapes, video 
tapes, video disks, game cartridges, analog or digital audio 
tapes, bank checks, event admission tickets, transportation 
tickets, passes, food stamps, and coupons. In each case the 
apparatus and methods of this invention may be adapted as 
an adjunct to the existing equipment without extensive 
modification of the existing equipment or at least without 
obsoleting the existing equipment. It is intended that the 
specification and examples be considered as exemplary only, 
with the true scope and spirit of the invention being defined 
by the following claims. 

Having described our invention, we claim: 

1. A method for authenticating data storage cards for use 
in conjunction with existing card-reading means, comprising 
the steps of: 

a) providing data storage cards bearing at least two sets of 
indicia including 

first indicia that are invisible when irradiated with light 
in the visible spectrum but are detectable when 
irradiated with non-visible light and 

second indicia readable by said existing card-reading 
means, 

b) irradiating said data storage cards with said non- visible 
light, 

c) detecting said first indicia to determine the authenticity 
or lack thereof for each of said data storage cards, and 

d) optionally exposing each of said data storage cards to 
said existing card-reading means to read said second 
indicia. 

2. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein 

said exposing step (d) is performed only if each said data 
storage card is authentic. 

3. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, further comprising the step of: 

e) indicating authenticity or lack thereof for each of said 
data storage cards according to the result of said 
detecting step (c). 

4. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein 

said irradiating step (b) further comprises the step of 
modulating said non-visible light at a predetermined 
frequency, and 
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said detecting step (c) further comprises the step of 
selectively detecting fluorescent light at said predeter- 
mined frequency. 

5. A method as in claim 4 for authenticating data storage 
cards for use in conjunction with existing card-reading 5 
means, wherein said predetermined frequency is equal to or 
greater than 10,000 Hertz. 

6. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein said detecting step (c) further comprises the 
step of comparing said first and second indicia according to 
predetermined criteria. 

7. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein said exposing step (d) is performed before 
said irradiating and detecting steps (b) and (c). 15 

8. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein said exposing step (d) is performed after 
said irradiating and detecting steps (b) and (c). 

9. A method as in claim 1 for authenticating data storage 20 
cards for use in conjunction with existing card-reading 
means, wherein said exposing step (d) is performed simul- 
taneously with said irradiating and detecting steps (b) and 
(c). 

10. A method as in claim 1 for authenticating data storage 25 
cards for use in conjunction with existing card-reading 
means, wherein 

said providing step (a) includes providing at least said 
second indicia in magnetic patterns, and 

said exposing step (d) is performed by using existing 30 
card-reading means capable of reading magnetic pat- 
terns and by reading said second indicia magnetically. 

11. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein 35 

said providing step (a) includes providing at least said 
second indicia in a magnetic stripe, and 

said exposing step (d) is performed by using existing 
card-reading means capable of reading a magnetic 
stripe and by reading said second indicia magnetically. 4 <> 

12. A method as in claim 11 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said existing- card-reading means 
has a slot, and wherein said exposing step (d) is performed 
using existing card-reading means by moving said magnetic 45 
stripe through said slot of said. existing card-reading means. 

13. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein 

said providing step (a) includes providing at least said 50 
second indicia as an optical bar code, and 

said exposing step (d) is performed by using existing 
card-reading means capable of reading an optical bar 
code and by reading said second indicia optically. 55 

14. A method as in claim 13 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said exposing step (d) is performed 
using existing card-reading means to scan said optical bar 
code. 

15. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein 

said- providing step (a) includes providing at least said 
second indicia as optical characters, and 65 

said exposing step (d) is performed by using existing 
card-reading means capable of reading and recognizing 
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optical characters, by reading said second indicia opti- 
cally, and by recognizing said optical characters. 

16. A method as in claim 1 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, wherein said existing card-reading means has an 
existing output, further comprising the steps of 

(f) enabling said existing output if each of said data 
storage cards is authentic, and 

(g) blocking said existing output if each of said data 
storage cards is not authentic, respectively. 

17. A method as in claim 8 for authenticating data storage 
cards for use in conjunction with existing card-reading 
means, further comprising the steps of 

(h) allowing said exposing step (d) for each of said data 
storage cards if it is authentic, and 

(i) preventing said exposing step (d) for each of said data 
storage cards if it is not authentic, respectively. 

18. A method as in claim 17 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein 

said allowing step (h) is performed by allowing each of 
said data storage cards to enter said existing card- 
reading means if it is authentic, and 

said preventing step (i) is performed by preventing each 
of said data storage cards from entering said existing 
card-reading means if it is not authentic, respectively. 

19. A method as in claim 17 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein . 

said allowing step (h) is performed by providing a first 
electrical input to enable said existing card-reading 
means, and 

said preventing step (i) is performed by providing a 
second electrical input to disable said existing card- 
reading means, respectively. 

20. A method as in claim 17 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein 

said allowing step (h) is performed by providing electrical 
power to said existing card-reading means, thereby 
enabling operation of said existing card-reading means, 
and 

said preventing step (i) is performed by withholding 
electrical power from said existing card-reading means, 
thereby disabling operation of said existing card-read- 
ing means, respectively. 

21. An apparatus for authenticating data storage cards for 
use in conjunction with existing card-reading means, com- 
prising: 

a) a housing having first and second ends and a card slot 
communicating between said first and second ends, 
said card slot being adapted for alignment with said 
existing card-reading means, 

b) a source of irradiating light characterized by having a 
peak wavelength outside the visible spectrum, said 
source being adapted for irradiating said data storage 
cards while they are within said card slot, 

c) one or more detectors of light emitted by said data 
storage cards in response to said irradiating light, each 
of said detectors producing a first electrical signal 
depending on one or more characteristics of said emit- 
ted light, 

d) signal processing means responsive to at least one of 
said first electrical signals to produce a second electri- 
cal signal indicative of the authenticity of said data 
storage cards, and . 
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e) output means responsive to said second electrical signal 
to indicate authenticity status of said data storage cards. 

22. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said output means comprises a 5 
visible indicator recognizable by a human user of the 
apparatus. 

23. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said output means comprises an l0 
audible signal recognizable by a human user of the appara- 
tus. 

24. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said output means comprises an l5 
electrical output recognizable by said existing card-reading 
means. 

25. An apparatus as in claim 24 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said electrical output comprises an 20 
electrical power input for energizing said existing card- 
reading means. 

26. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said existing card-reading means 25 
has an existing slot, and said card slot is aligned with said 
existing slot in said existing card-reading means. 

27. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjuncnon with existing card- 
reading means, wherein said first end of said housing is 30 
disposed so that said data storage cards may pass through 
said card slot before entering said existing card-reading 
means. 

28. An apparatus as in claim 21 for authenticating data 
storage cards for use in conjunction with existing card- 35 
reading means, wherein said first end of said housing is 
disposed so that said data storage cards may pass through 
said card slot after exiting said existing card-reading means. 

29. An apparatus for authenticating data storage articles 
for use in conjunction with existing article-scanning means, 40 
comprising: 

a) a housing having a window and means for attaching 
said housing to said existing article-scanning means, 
said housing being adapted for alignment with said 
existing article-scanning means, 45 

b) a source of irradiating light characterized by having a 
peak wavelength outside the visible spectrum, adapted 
for irradiating said data storage articles through said 
window in said housing, 

c) one or more detectors of light emitted through said 50 
window by said data storage articles in response to said 
irradiating light, each of said detectors producing a first 
electrical signal depending on one or more character- 
istics of said emitted light, 

d) signal processing means responsive to at least one of 
said first electrical signals to produce a second electri- 
cal signal indicative of the authenticity of said data 
storage articles, and 

e) output means responsive to said second electrical signal 50 
to indicate authenticity status of said data storage 
articles. 

30. An apparatus for authenticating data storage cards for 
use in conjunction with existing card-reading means, com- 
prising: " 65 

a) a first light guide characterized by being transmissive 
to non-visible light, said first light guide being adapted 
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for irradiating said data storage cards with said non- 
visible light while said existing card-reading means are 
in use, 

b) a second light guide characterized by being transmis- 
sive to fluorescent light emitted by said data storage 
cards in response to said non-visible light, said second 
light guide being adapted for transmitting said fluores- 
cent light while said existing card-reading means are in 
use, 

c) a source of said non-visible light characterized by 
having a peak wavelength outside the visible spectrum, 
said source being adapted for irradiating said data 
storage cards through said first light guide, 

d) one or more detectors adapted for detecting said 
fluorescent light emitted through said second light 
guide by said data storage cards in response to said 
irradiating light, each of said detectors producing a first 
electrical signal depending on one or more character- 
istics of said emitted fluorescent light, 

e) signal processing means responsive to at least one of 
said first electrical signals to produce a second electri- 
cal signal indicative of the authenticity of said data 
storage cards, and 

f) output means responsive to said second electrical signal 
to indicate authenticity status of said data storage cards. 

31. An apparatus as in claim 30 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said first light guide (a) and said 
second light guide (b) are combined in a single light guide 
characterized by being transmissive to both said non-visible 
light and said fluorescent light. 

32. An apparatus as in claim 30 for authenticating data 
storage cards for use in conjunction with existing card- 
reading means, wherein said first light guide (a) and said 
second light guide (b) are combined in a single fiber-optic 
cable characterized by having fibers transmissive to both 
said non-visible light and said fluorescent light. 

33. An apparatus as in claim 21, wherein said source of 
irradiating light is selected from the list consisting of a 
high-pressure mercury vapor lamp, a non-visible laser, a 
non-visible light-emitting diode, and a non-visible arc lamp. 

34. An apparatus as in claim 29, wherein said source of 
irradiating light is selected from the list consisting of a 
high-pressure mercury vapor lamp, a non-visible laser, a 
non-visible light-emitting diode, and a non-visible arc lamp. 

35. An apparatus as in claim 30, wherein said source of 
irradiating light is selected from the list consisting of a 
high-pressure mercury vapor lamp, a non-visible laser, a 
non-visible light-emitting diode, and a non-visible arc lamp. 

36. An apparatus as in claim 21, wherein said signal 
processing means comprise: 

a) an analog-to-digital converter for converting said first 
electrical signal to digital form, 

b) a memory for storing at least said digital form of said 
first electrical signal, 

c) recognition logic for recognizing said digital form of 
said first electrical signal, and 

d) a microcomputer for generating said second electrical 
signal indicative of the authenticity of said data storage 
cards. 

37. An apparatus as in claim 29, wherein said signal 
processing means comprise: 

a) an analog-to-digital converter for converting said first 
electrical signal to digital form, 

b) a memory for storing at least said digital form of said 
first electrical signal. 
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c) recognition logic for recognizing said digital form of 
said first electrical signal, and 

d) a microcomputer for generating said second electrical 
signal indicative of the authenticity of said data storage 
articles. 5 

38. An apparatus as in claim 30, wherein said signal 
processing means comprise: 

a) an analog-to-digital converter for converting said first 
electrical signal to digital form, 

b) a memory for storing at least said digital form of said 
first electrical signal, 

c) recognition logic for recognizing said digital form of 
said first electrical signal, and 

d) a microcomputer for generating said second electrical 15 
signal indicative of the authenticity of said data storage 
cards. 

39. An apparatus as in claim 21, wherein said signal 
processing means comprise a digital signal processor. 

40. An apparatus as in claim 29, wherein said signal . 20 
processing means comprise a digital signal processor. 

41. An apparatus as in claim 30, wherein said signal 
processing means comprise a digital signal processor. 

42. An apparatus as in claim 30, wherein said first and 
second light guides are inserted through holes in said 25 
existing card-reading means. 

43. An apparatus as in claim 31, wherein said single light 
guide is inserted through a hole in said existing card-reading 
means. 

44. An apparatus as in claim 32, wherein said fiber-optic 30 
cable is inserted through a hole in said existing card-reading 
means. 
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45. An apparatus as in claim 21, wherein said existing 
card-reading means are selected from a list of reading means 
consisting of magnetic stripe readers, magnetic tape readers, 
magnetic character readers, optical character readers, IC 
card readers, memory card readers, game cartridge readers, 
bar-code scanners, CCD scanners, CD-ROM readers, and 
RF tag readers. 

46. An apparatus for authenticating data storage articles 
for use in conjunction with existing article-reading means, 
comprising: 

a) a housing, said housing being adapted to be aligned 
with said existing article-reading means; 

b) a source of irradiating light characterized by having a 
peak wavelength outside the visible spectrum, said 
source being adapted to irradiate said data storage 
articles; 

c) one or more detectors of light emitted by said data 
storage articles in response to said irradiating light, 
each of said detectors producing a first electrical signal 
depending on one or more characteristics of said emit- 
ted light; 

d) signal processing means responsive to at least one of 
said first electrical signals to produce a second electri- 
cal signal indicative of the authenticity of said data 
storage articles; and 

e) output means responsive to said second electrical signal 
to indicate authenticity status of said data storage 
articles. 

***** 
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ABSTRACT 



A disk (110) carries containers (such as 120) each con- 
taining a stack of cards capable of being extracted one- 
by-one via an orifice (126) when a wheel (151) is moved 
to an extraction position (151A). A first conveyor 
(140A) then conveys the extracted card to a program- 
ming unit (1) which is capable of being moved to a 
position enabling a card to be inserted therein without 
friction, and thereafter lowers a connector (6) onto the 
card. After the card has been validated and inspected, it 
is conveyed to a user along the first conveyor (140A) 
and then along a second conveyor (140B) terminating at 
a delivery slot (105). An invalid card may be directly 
rejected into a reject box (180) placed beneath the pro- 
gramming unit (1). 

18 Claims, 6 Drawing Sheets 
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rejected directly from the conveyor into a receptacle 

AUTOMATIC PROGRAMMER AND DISPENSER for the purpose. 

OF MICROCIRCUIT CARDS In a particular embodiment of the invention, the pick- 
up means comprise a roll or wheel carried on a moving 

The invention relates to dispensing microcircuit 5 lever and suitable on control for co-operating with the 

cards which are about to come into common use. magazine in order to extract a card therefrom and direct 

BACKGROUND OF THE INVENTION * ^conveyor inc.udes at .east 

Microcircuit cards, also known as "smart" cards, are two pairs of wheels constituting said common portion 

now on sale for use with public pay phones, and such 10 with at least one of said wheels being motor-driven. A 
cards may have a value of 40 or 120 telephone charge closed-loop belt can then pass between the wheels of 

units, for example. The advantage is clear: since card- each pair. The second conveyor includes at least two 

accepting public phones do not contain any money they other pairs of wheels specific thereto, with the last such 

will not be broken into. pair being placed close to the outlet slot. The belt also 

Drawbacks lie in amoritizing the cost of setting up 15 passes through these other pairs of wheels, 
such a smart card system and in meeting the on-going It is advantageous for one of the wheels in the inter- 
cost of dispensing suitable smart cards. These cards can mediate pair of wheels belonging to the second con- 
be obtained not only from official telephone services, veyor to act also as a pick-up wheel, 
but also from numerous other retail outlets which must According to yet another aspect of the invention, the 
be paid for providing this service. 20 card outlet from the magazine, the path along the first 

French patent application No. 86 005 11 filed Jan. 15, conveyor, and the card inlet/outlet of the programming 
1986 in the name of the present applicant, describes an unit are substantially in alignment 
automatic dispenser for smart cards, which dispenser is As a result, the path defined by the two pairs of 
suitable for dispensing telephone cards. Such machines wheels belonging to the second conveyor is, in theory, 
reduce the cost of dispensing cards. However, they 25 at an angle relative to the path through the first con- 
bring back the problem of machines being broken into: veyor. In accordance with the invention, one of the 
since smart card dispensing machines contain money, - wheels situated level with the transistion is mounted as 
they will be worth robbing. This danger can be reduced a moving wheel so as to enable the card to be tilted 
by placing such dispensing machines in crowded loca- without losing drive continuity, 
tions or in locations which are under constant surveil- 30 In one embodiment, the card magazine includes at 
lance. However this solution is not capable of general least one container storing a stack of cards which are 
application. resiliently urged towards a pick-up and outlet position. 

The present applicant seeks to improve the safety of A plurality of containers of this type may be mounted 

smart card dispensing machines. on a carrousel. 

Thus, one aim of the invention is to provide an auto- 35 In a variant embodiment, the magazine comprises a 

matic smart card dispensing machine in which the stock carrousel in the form of a rack suitable for storing one 

of undispensed cards has no monetary value. card in each slot of the rack, said carrousel rack being 

Another aim of the invention is to enable a smart card rotatably mounted inside a disk-shaped container which 

whose credit has been exhausted to be re-validated (i.e. is closed except for a card-delivery slot located level 

reprogrammed). 40 with one of the rack slots. Said container also houses 
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means for rotating the carrousel. 



The present invention provides an automatic dis- BRIEF DESCRIPTION OF THE DRAWINGS 

penser for microcircuit cards, said dispenser compris- Embodiments of the invention are described by way 

ing: 45 of example with reference to the accompanying draw- 

a cabinet; ings, in which: 

dispenser control means also capable of dialog with a FIG. 1 is a diagrammatic perspective view of a pro- 
user, in order to verify the user's right to a card; grarriming unit usable in a device in accordance with the 

at least one magazine for non-valid microcircuit invention; 
cards; 50 FIG. 2 is a diagrammatic side view of a first embodi- 

pick-up means suitable for extracting one card at a ment of a device in accordance with the invention; 
time from said magazine; FIGS. 2A to 2C are diagrams showing the operation 

a first conveyor for conveying said card to a pro- of the prograrnming unit within the FIG. 2 device; 
graniming unit capable of validating said card; and FIG. 3 is a plan view showing a first embodiment of 

a second conveyor suitable for conveying a validated 55 a carrousel constituting a card magazine in accordance 

card to a card-dispensing slot through the wall of the with the invention; 

cabinet. FIG. 4 is a block diagram showing the general struc- 

In practice, the programming unit is also capable of ture of a device in accordance with the invention from 

verifying card validation, and the dispenser includes * the electronic and operational points of view; and 
rejection means enabling any incorrectly validated card 60 FIGS. 5 and 5A are diagrams showing a variant em- 

to be retained inside the cabinet. bodiment of a magazine in accordance with the inven- 

Preferably, the first and second conveyors possess a tion. 
common portion suitable for transferring the card into The accompanying drawings are, at least in part, 

the programming unit and out therefrom. definitive in character. They also show geometrical 

According to another aspect of the invention, the 65 shapes which are difficult to describe fully. Conse- 

moving programming unit has a second position in quently the accompanying drawings may be used not 

which it no longer co-operates with the first conveyor only to clarify the description, but also to contribute to 

or with the common portion. Invalid cards can then be the definition of the invention, where appropriate. 
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A second conveyor is formed by the abovementioned 

MORE DETAILED DESCRIPTION two pairs of wheels, together with a third pair of wheels 

The description begins with the programming unit, 161 & 162 situated close to the delivery slot 105, and 
with reference to FIG. 1. This programming unit is the co-operates therewith for card delivery. A fourth, inter- 
subject of French patent application No. 8601 794, filed 5 mediate pair of wheels is defined by the above-men- 
Feb. 18, 1986. The descriptive content of said patent tioned wheel 151 when in its rest position and a wheel 
application is incorporated by reference, where neces- 152. A belt 140 runs round a closed loop over the 
sary, into the present description. wheels 162, 152, 132, and X42. In other words, this belt 

Briefly, the FIG. 1 programming unit comprises a passes between the two wheels of each pair. The motor- 
chassis 1 having an end wall 10 and a side wall 11 which 10 driven wheel 142 and the belt 140 provide the drive 
are visible in the figure. A DC motor 20 drives an end- required for both conveyors. 

less screw 21 which cooperates with a gearwheel 22 in A card edge detector 170, e.g. a photoelectric barrier, 

order to rotate a shaft 25 clockwise (as seen in FIG. 1) is placed inimeojately to the right of the wheels 131 and 

with the shaft 25 carrying two cams 31 and 32 together «2 (as shown in FIG. 2) i.e. downstream therefrom for 

with a wheel 40 constituting a two-position angular 15 cards going towards the programming umt 1. Two 

encoder wheel or o oth(jr photoelectric barriers 171 and 172 are placed 

A receptacle 5 for receiving microcircuit or "smart" respectively immediately to the left of the pair of 

cards is defined by a slot provided in a plate 50 which is ^Vf^ ? t * ° f *f P !? ? r 

. * » u***«w v/j r v 16 j d j£2, (i.e. to the downstream sides thereof for a 

P1 ^3^ - cardmovmg ^ 

on the plate 50. Sn^ ^^X^^^^ It is 

force provided by a spring 81 mounted between the top ^ ^ bottom of & ^ ^ haviflg 

of the plate 50 and a rod 80 means 13? tendin tQ ft mto a veftical ition ^ 

The slot for receiving a card such as the card C has a fod ^ bc ^ Qf M tkct ^ 

reference edge 53 and an opposite edge including ^a t m ^ Qrder tQ ^ ft leftwardl (as seen in pro. 

resilient blade 54 for urging the card C towards the 2) £ ^ ^ wheel m followg a path following an arc 
reference edge 53. A detector 58 venules that the card of a circle m ^ ong which it ^ by its shaft. This 
is properly positioned in the slot 5. bfmg9 ^ wheel 131 mt0 a pos j t i on X 3 1A m w hi c h the 

There is an opening 59 through the top wall of the 3Q tangent between the wheel in position 131 A and the 
plate 50 suitable for passing a connector block 6. The wheel 132 ^ wit h t h e tangents common to pairs 

connector block is mounted at the end of one of the of whee ] s 151 m ^ and 161 and 162. 
arms 70 of a bell crank hinged on a shaft 71 and having A box 180 fe mount ed beneath the programming unit 
its other arm disposed to follow the cam 32 by virtue of x ^ exten ds up to its shaft 51. The other way, the box 
a resilient force applied on the arm 70 by a spring 82 35 exten ds practically up to a point vertically below the 
connected to the rod 80. wheels 141 & 142. 

Reference is made below to this programming unit 1, j n pjQ f 2, the programming unit 1 is shown in its rest 
or more precisely to a mirror image thereof reflected position in which it is not co-operating with the pair of 
about a median vertical plane passing therethrough. wheels 141 and 142 (which wheels correspond to the 

In FIG. 2, a dispenser in accordance with the in- 40 wheels Rl and R2 shown in FIG. 1). 
ventio comprises a cabinet having a reinforced outer This rest position is repeated in FIG. 2A. As de- 
wall of which a portion 100 is visible, and having a slot scribed in the above-mentioned French patent applica- 
105 for dispensing a card to a user. tion No. 86 01794, the programming unit 1 may, on 

A vertical disk 110 supports a series of card contain- command, begin by taking up a position 2B in which it 
ers 120. Each container 120 contains internally- 45 \ s capable of receiving a card with substantially no 
mounted resilient means 122 which press against a pis- friction, and then a position 2C in which the multiple 
ton 121 which in turn urges a stack of cards 123 in a connector 6 is brought into contact with the contact 
downwards direction. The bottom card presses against tabs PC on the microcircuit card, 
the bottom wall 125 of the container and is capable of The general operation of the device is thus as follows: 
leaving the container via an orifice 126. There is a hole 50 As already mentioned, a card is initally extracted 
through the bottom wall 125, and a wheel 151 passes from the container 120. It enters the first conveyor and 
through the hole and engages the bottom card when the the unit 1 is placed in the position shown in FIG. 2B in 
wheel 151 is raised to a position 151A. The wheel is order to receive the card. 

raised by means of an electromagnet 159 whose rod 158 The programming unit 1 then passes to the connec- 
includes resilient means and is used to displace a lever 55 tion situation shown in FIG. 2C. The card is validated 
150 carrying the wheel 151. or programmed, and then preferably verified prior to 

Drive means (not shown) rotate the wheel 151 clock- the unit 1 returning to the FIG. 2B position for the card 
wise (as shown in FIG. 2) when it is in its position 151A to be removed therefrom. The programming unit then 
(e.g. the belt between 132 and 151). returns to its rest position as shown in FIG. 2A. 

A card is thus extracted from the container 120, and 60 If verification shows that the card has been wrongly 
unstacking techniques are capable of ensuring that only validated, for any reason whatsoever, the first conveyor 
one card is removed at a time, e.g. by using a suitable is restarted in a generally rightwards direction causing 
chute. the card to fall directly into the box 180, Where appro- 

The card then leaves along the axis of two pairs of priate, the above operations are repeated using a new 
wheels 131 and 132 and 141 and 142. These two pairs of 65 card taken from the magazine 120. 
wheels constitute a first conveyor (path 140A), for If the card is properly validated, it advances a little 
transporting the card to the programming unit 1, and into the first conveyor. In response to an edge of the 
for removing it from the programming unit, .._ card (e.g. Us leading edge) being detected by the sensors 
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170, and electromagnet 139 is acutated to tilt the wheel worth. If the possible range of numbers if small, such 
131 into its position 131A. The card then follows the marking can be performed by rubber stamps controlled 
direction of the second conveyor in portion 140B of the by electromagnets. If a wider range of markings is re- 
belt. Naturally, the electromagnet 159 is released mean- quired, a printing technique may be used such as one of 
while in order to return the wheel carried by the arm 5 those described in the following French patent applica- 
150 to its position 151. It may be noted in passing that tions: No. 83 11444 published under the No. 2,548,804, 
the lever 150 is advantageously hinged coaxially with No. 84 10380 published under the No. 2,566,705, or No. 
the wheel 132. 85 01661, which has not yet been published. 

The card can then move down along belt portion A dispenser in accordance with the invention has 

140B until it projects out through the slot 105, enabling 10 another important advantage: regardless of the way in 

a user to take it out from the machine. The condition of which a microcircuit card is programmed or validated, 

a card being presented to a user is detected by the pho- it is possible to provide for a card whose credit has been 

toelectric barrier 17L The photoelectric barrier 172 exhausted to be re-inserted by a user and re-validated or 

detects that the card has indeed been taken by the user re-programmed by the machine after the user has paid 

within a predetermined period of time. The user is pref- 15 the appropriate sum. 

erably reminded by an audible signal (or by other The user presents the card at slot 105 and the card is 

means) if the card is forgotten. inserted into the machine so that it reaches its position in 

If the card is still not taken, the entire second con- the first conveyor 140A (after the wheel 141 has been 

veyor (paths 140B and 140A) is actuated in the opposite tilted in the opposite direction), 

direction and the card is held in the box 180. 20 The user's right to the card is then verified and the 

A dispenser in accordance with the invention im- card is re-validated or re-programmed. If the re-valida- 

proves security in several respects: firstly relative to the tion docs not work or is impossible (with the number of 

card magazine itself, and secondly relative to card pro- occasions on which a card can be validated being pre- 

gramming. programmed into the card on manufacture), a new card 

A first embodiment of the card magazine is shown in 25 is programmed and dispensed to the user. 

FIG. 3. Eight containers 120-1 to 120-8 (for example) Reference is made above to the user's "right" to the 

are located on a disk 110. The container 120-1 is en- card. In practice this right is obtained by paying a sum 

gaged with the wheel 151 when in its position 151A. of money in coin or bank notes or by any appropriate 

When the cards are manufacutred they are initially electronic payment means. However, it is possible that 

stored in the containers 120. In isolation, a container 120 30 a user may establish his right to a card in some manner 

is closed and cards cannot be extracted therefrom. A other than by payment. 

locking lever is unlocked solely when the container is At present it will be assumed that the right to a card 

placed on a disk such as disk 110 which has a suitable is obtained by payment. The general operational struc- 

indexing and/or mechanical coding system (3 micro- ture of the apparatus is shown in FIG. 4, which is simi- 

switches or 3 optoelectronic sensors suitably disposed) 35 lar to FIG. 1 of above-mentioned patent application No. 

so that cards can subsequently be extracted one at a 86 00 511. Reference can be made to this prior patent 

time. When containers are not in place on a disk such as application for further details, with the reference nu- 

the disk 110 within a dispenser in accordance with the merals in present FIG. 4 corresponding to the reference 

invention, cards cannot be extracted therefrom without numerals of FIG. 1 in the earlier patent application 

breaking the container. 40 prefixed by the digit 2, Members 214 to 218 plus a return 

Within the dispense, it is impossible to have a more chute 222 are used for transactions in coin. Payment by 

than one card moving at the same time, since the mem- means of bank notes is provided by means of a recepta- 

ber 151 which extracts the cards moves to its extraction cle 222. 

position 151A under the control of a central unit, as Preferably, payment may be made by conventional 

described below, only once during each operating cycle 45 electronic payment means as illustrated at 223 ("smart'* 

of the machine. bank card, credit card, etc.). 

Naturally, proper positioning of the container 120-1 This takes place under the control of a central control 
opposite the pick-up wheel 151 is ensured by a coding unit 212 which receives instructions from a user key- 
wheel or an equivalent mechanical index system pro- board 224, and which actuates display means 226 and 
vided on the disk 110. Attention is now directed to card 50 228 as a result, for example to show the amount of 
programming. money that remains to be paid and various other items 

Depending on the application and the type of card of information, 

concerned, card validation may consist in fully pro- After verifying the user's right to a card, the central 

gramming an entirely blank card. At the other extreme, unit 212 controls a dispense such as 230 or 232. given 

validation may be applied to cards which are almost 55 that a card magazine in accordance with the invention 

completely validated except for a single validation bit at may contain a very large number of cards, it is presently 

a predetermined location. Naturally, numerous interme- believed that a single dispenser will suffice in practice, 

diate solutions are also possible. The connections between the central unit 212 and the 

For example, when the application is a telephone dispenser consist in: 

card, 40-unit and 120-unit cards may be placed in differ- 60 controlling the position of the carrousel 110 (FIG. 2) 

ent ones of the containers 120-1 and 120-2 on the car- or 300 (FIG. 5, described below); 

rousel 110 shown in FIG. 3, These cards may be pre- actuating the electromagnet 159 and the stepper 

recorded with inscriptions defining their value in terms motor 145 for extracting a card unless the user has pres- 

of telephone charge units. ented a card in the slot 105 for re-validation; and 

Otherwise, if the cards are completely blank, means 65 simultaneously or sequentially positioning the pro- 
may be provided within the portion 140B of the second gramming unit 1; reversing the conveyors and actuating 
conveyor for visibly marking such cards so as to indi- the electromagnet 139 until the new card has been dis- 
cate the number of telephone charge units they are pesnsed to the user, and taking appropriate account of 
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the variations described above concerning incorrectly 
validated cards or cards for re-validation. 

The programming unit itself has its motor 20 con- 
nected to the central unit 212 as well as its detectors 41, 
42, and 58, and of course the set of tabs in the connector 5 
block 6. 

A variant magazine in accordance with the invention 
is now described with reference to FIGS. 5 and 5 A. 

FIG. S A is a side view of the magazine itself consti- 
tuted by a rigid disk-shaped container which is prefera- 10 
bly closed by means of lead-sealed screws. Inside the 
container there is a flat disk 300 and drive means 320 
coaxial therewith. The drive means 320 have associated 
control electronics inside the container 310 so as to 
make it impossible to rotate the disk 300 without know- 15 
ing the details of the control means, and for example 
safety codes associated with control thereof. 

FIG. 5 is a plan view of the disk 300 with the con- 
tainer 310 removed. 

It can be seen that this disk carries a rack structure 20 
having a plurality of slots each of which houses a single 
card in a radial position such as 310-1, 310-2, etc. 

A card can be delivered only if its slot in the rack is 
level with the outlet slot 301 through the wall of the 
container, thereby allowing the card to drop through 25 
the slot. 

The security obtained in this way is practically as 
good as that obtained in the first embodiment since the 
disk 300 cannot be rotated inside the container 310 
without a thorough knowledge of the system and its 30 
drive security codes, or else without breaking the con- 
tainer 310. 

A card can then be taken up by a suitable mechanism 
for applying it to the path 140 A of the first conveyor. 

Alternatively it may drop to a predetermined position 35 
in a slideway or chute which brings it into position 
between the wheels 131 and 132. All of the wheels in 
the device can then be aligned. 

It is important to ensure that theft of the card pro- 
gramming means will not enable cards to be fraudu- 40 
lently programmed. In order to make this possible, the 
equipment is advantageously permanently monitored 
over a telephone link. It then receives a coding key (e.g. 
a DES =Date Encryption Standard key as already used 
for inter-bank transactions, for example), with the key 45 
being required before cards can be validly programmed. 
Further, backed-up read/write memories may be auto- 
matically erased in the event of the device being broken 
into or stolen. 

Further, the device in accordance with the invention 50 
may additionally include means for reading/writing the 
magnetic tracks of a card, with said means being lo- 
cated, for example, between the wheels 131 and 141. 

Naturally, the present invention is not limited to the 
embodiments described, but extends to any variant 55 
lying within the scope of the following claims. 

I claim: 

1. An automatic dispenser for microcircuit cards, said 
dispenser comprising: 

a cabinet; 60 

dispenser control means capable of dialog with a user, 
in order to verify the user's right to a card; 

at least one magazine in the cabinet containing non- 
valid microcircuit cards; 

pick-up means in the cabinet for extracting one card 65 
at a time from said magazine; 

a programming unit in the cabinet having means for 
validating a non-valid microcircuit card and for 



re-validating a previously programmed microcir- 
cuit card; 

first conveyor means for conveying the extracted 
non-valid card to said programming unit for vali- 
dating said card; 

second conveyor means for conveying an externally 
input and previously programmed card to said 
programming unit for re-validating said previously 
programmed card; and 

third conveyor means for conveying the validated 
card or re-validated card from the programming 
unit to a card-dispensing slot through the wall of 
the cabinet 

2. A dispenser according to claim 1, wherein the 
programming unit is also capable of verifying card vali- 
dation, and wherein it includes means for rejecting any 
incorrectly-validated card and for storing it inside the 
cabinet. 

3. A dispenser according to claim 1, wherein said first 
and third conveyor means includes a common conveyor 
portion suitable for transferring the card to the pro- 
gramming unit and away therefrom. 

4. A dispenser according to claim 3, wherein the 
programming unit is movable and includes a second 
position in which it is no longer accessible to or from 
said common conveyor portion, thereby enabling in- 
valid card rejection to take place directly from the 
common conveyor portion into an invalid card recepta- 
cle. 

5. A dispenser according to claim 3, wherein said 
pick-up means comprise a wheel mounted on a moving 
lever and suitable for cooperating on command with the 
magazine to extract the card therefrom and apply it to 
the first conveyor means. 

6. A dispenser according to claim 3, wherein the first 
conveyor means includes at least two pairs of wheels 
constituting said common portion, with at least one of 
said wheels being motor-driven. 

7. A dispenser according to claim 3, wherein the third 
conveyor means includes a belt passing in a closed loop 
between a first pair of wheels of the first conveyor 
means and between wheels and a last pair of wheels 
placed closed to the card-dispensing slot. 

8. A dispenser according to claim 7, wherein the 
intermediate pair of wheels of the third conveyor means 
also constitutes said pick-up means. 

9. A dispenser according to claim 3, wherein a card 
outlet from the magazine, the path along the first con- 
veyor means, and a card inlet/outlet of the program- 
ming unit are substantially in alignment. 

10. A dispenser according to claim 9, wherein the 
path defined by the first pair and the last pair of wheels 
belonging to the third conveyor means is at a slope 
relative to the path through the first conveyor means, 
and wherein one of the first pair of wheels situated level 
with the transition between the conveyors is a moving 
wheel to enable a card to tilt without losing drive conti- 
nuity. 

11. A dispenser according to claim 10, wherein the 
center of said moving wheel follows an arc of a circle 
which is substantially concentric with the other wheel 
of the same pair. 

12. A dispenser according to claim 10, including a 
card edge detector adjacent to said moving wheel, on 
the first conveyor side thereof. 

13. A dispenser according to claim 3, including a card 
edge detector situated close to the middle of the portion 
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specific to the third conveyor means, and a card edge 
detector close to the card dispensing slot. 

14. A dispenser according to claim 1, wherein the 
card magazine includes at least one container housing a 
stack of cards which is resiliently-urged towards a pick- 5 
up position to enable said cards to be extracted there- 
from. 

15. A dispenser according to claim 14, wherein a 
plurality of such containers are mounted on a carrousel. 

16. A dispenser according to claim 1, wherein the 10 
magazine comprises a carrousel having a card rack 
suitable for housing one card per rack slot, said carrou- 
sel being rotatably-mounted inside a disk-shaped con- 
tainer which is closed except for an outlet slot level 
with one of the card slots in the rack, said container also 15 
housing carrousel drive means. 

17. A method for programming and dispensing mi- 
crocircuit cards, comprising: 

disposing inside a cabinet (a) at least one magazine 
containing non-valid microcircuit cards, (b) pick- 20 
up means for extracting one card at a time from 
said magazine, and (c) a programming unit for 
validating a non-valid microcircuit card and for 



i 

10 

re-validating a previously programming microcir- 
cuit card; 

providing a dispenser control means capable of dialog 
with a user in order to verify the user's right to a 
card; 

conveying a non-valid card extracted from the maga- 
zine to said programming unit for validating said 
non^valid card; 

conveying an externally input and previously pro- 
grammed card to said programming unit for re- 
validating said previously programmed card; and 

conveying the validated card or the re-validated card 
to a card dispensing slot through the wall of the 
cabinet. 

18. The method according to claim 17, including 
moving the programming unit to a position which is no 
longer accessible to or from conveyors from said vali- 
dated or re-validated microcircuit cards for enabling 
invalid card rejection to take place directly from such 
conveyor into an invalid card receptacle contained 
within the cabinet 

***** 
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It is certified that error appears in the above-identified patent and that said Letters Patent is hereby 
corrected as shown below: 

In the Specification : 



Column 2 
Column 2 

column 3 

Column 4 

Column 4 
Column 4 

Column 5 
Column 5 
Column 5 
Column 5 

Column 6 
Column 6 
Column 6 
Column 6 



line 41, change "carrousel" to — carousel — . 
line 55, change "carrousel" to — carousel — . 

line 41, change " invent io" to — invention — . 

line 1, change "abovementioned" to 

— above-mentioned — • 
line 7, change "round" to — around — . 
line 24, change "tendin" to — tending — . 

line 1, change "and" to — the — . 

lines 4,5, delete "meanwhile". 

line 41, change "dispense" to — dispenser — • 

lines 61,62, change "carrousel" to — carousel — . 

line 1, change "if" to — is — . 

line 54, change "dispense" to — dispenser — . 

line 54, change "given" to — Given — . 

line 60, change "carrousel" to — carousel — . 



Column 7, line 44, change "Date" to — Data — „ 
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